us05[.]zoom[.]web04[.]us

The domain us05.zoom.web04.us is assessed as a generic_phishing endpoint designed to impersonate Zoom-related services and capture user credentials. The infrastructure indicates an elevated risk rating due to active abuse patterns consistent with login credential harvesting and session interception attempts.

Technical telemetry confirms multiple indicators of compromise and malicious classification. VirusTotal reports 18/95 security vendors flagging the domain. The domain was created on June 01 2026 and resolves to IP 172.86.91.195. It appears on 1 security blocklist and has been blocked by PhishDestroy. The domain is currently marked offline, indicating enforcement action has disrupted active hosting.

If visited, users should assume any entered credentials are compromised. Immediate mitigation includes password resets for affected accounts, revocation of active sessions, and enabling multi-factor authentication. Browser cache and stored credentials should be cleared, and endpoint scans conducted for potential payload delivery. Network logs should be reviewed for suspicious outbound connections. Continuous monitoring is recommended due to possible credential reuse attacks.