us04zoom[.]us

The domain us04zoom.us is a generic phishing site designed to deceive users into disclosing sensitive information through fraudulent login or credential harvesting pages. No specific brand impersonation or crypto drainer kit was identified. As of the latest verification, us04zoom.us has been taken offline, reducing immediate risk to users, though caution is still advised for those who may have interacted with it previously.

Technical analysis of us04zoom.us reveals limited detection, with only 1 of 95 VirusTotal security vendors flagging the domain. The domain was registered through ABOVE.COM PTY LTD. on April 29, 2020, and resolves to the IP address 199.59.243.228, hosted on Amazon.com, Inc.'s infrastructure (AS16509). It appears on a single security blocklist (PhishDestroy) and uses an SSL certificate issued by Let's Encrypt (R13). Detected technologies include Google Cloud, Nginx, and Google Cloud CDN. The observed page title was identical to the domain name, us04zoom.us, and no additional brand impersonation was confirmed.

Users who visited us04zoom.us should take immediate steps to secure their accounts by changing passwords for any services accessed during the potential exposure. Enabling two-factor authentication (2FA) on all critical accounts is strongly recommended to mitigate the risk of unauthorized access. Monitor financial and login activity for signs of fraud, such as unexpected transactions or unfamiliar devices. Report the phishing domain to relevant authorities, including the Anti-Phishing Working Group (APWG) at reportphishing@apwg.org, and consider submitting the URL to Google Safe Browsing for broader protection.