us81webzoom[.]us
“The new site has been successfully created and is ready to work”
us81webzoom.us — Não verificado. Representação da marca: Zoom; Tipo de golpe: Account Takeover. Resumo das evidências: VirusTotal 11/93 (alphaMountain.ai, BitDefender, CRDF, CyRadar, ESTsecurity); CF Radar malicious; PhishDestroy score 83/100. Registrador: Dynadot.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
The domain us81webzoom.us was registered through Dynadot Inc on February 21, 2026 and is currently resolving to the IP address 87.236.16.18, which belongs to Beget LLC in Russia (AS198610). The hosting environment is fronted by Cloudflare and serves content over Nginx, while the page includes client‑side libraries such as Lodash, jQuery (via CDN), FancyBox and cdnjs. An SSL certificate issued by Let’s Encrypt (R13) is present, indicating the site is reachable via HTTPS. DNS is managed by four Beget name servers (ns1.beget.com, ns2.beget.com, ns1.beget.pro, ns2.beget.pro).
HTTP requests return a 403 status, suggesting access restrictions or a deliberately hidden landing page. The page title returned by the server reads “The new site has been successfully created and is ready to work,” which provides no direct indication of the targeted brand or service. Threat intelligence classifies the activity as an account‑takeover scam, and the site is listed on at least one security blocklist. It has been blocked by PhishDestroy and receives a Gridinsoft trust score of 0 / 100, reflecting a very low reputation.
VirusTotal analysis shows that 11 of 93 scanning engines flag the domain as malicious, reinforcing the suspicion of abuse. Defenders should treat the domain as high‑risk: block DNS resolution, enforce URL filtering, and monitor outbound connections to the associated IP. Additional investigation should focus on retrieving the actual page content, identifying any credential‑harvesting forms, and correlating traffic logs for signs of credential submission. Until further evidence is gathered, the domain should be considered an active malicious infrastructure used for account‑takeover campaigns.
Inteligência de segurança de rede
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Tecnologias · 7 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org 100% de confiançaCloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com 100% de confiançaLodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm.
www.lodash.com 100% de confiançajQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.
code.jquery.com 100% de confiançajQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com 100% de confiançaFancyBox is a tool for displaying images, html content and multi-media in a Mac-style 'lightbox' that floats overtop of web page.
fancyapps.com 100% de confiançaAnálise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of us81webzoom.us · checked Mar 2, 2026
Evidências e relatórios externos
Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo