us05web[.]zoom[.]us05[.]us

Analysis of the domain us05web.zoom.us05.us indicates active brand impersonation targeting Zoom, a widely recognized video conferencing platform. The domain was registered on June 1, 2026, and currently resolves to the IP address 144.172.114.220, hosted by FranTech Solutions in the United States. Infrastructure analysis reveals the use of a Let's Encrypt SSL certificate (YR1), which, while providing encryption, does not validate the legitimacy of the site. The domain returns an HTTP 200 status, suggesting it is operational and serving content. At the time of assessment, 15 of 91 security vendors on VirusTotal have flagged this domain as malicious, indicating a moderate level of detection but not universal consensus. The domain appears on at least one security blocklist and is actively blocked by PhishDestroy. The page title, 'Pro Creator Platform,' does not align with known Zoom services, further suggesting an attempt to deceive users under the guise of a legitimate platform. The registration details and hosting provider are consistent with patterns observed in phishing infrastructure, where newly registered domains and bulletproof hosting services are frequently leveraged. While the exact content of the site has not been analyzed, the combination of brand impersonation, recent registration, and detection by security vendors confirms the high-risk classification. Defenders are advised to treat this domain as malicious and implement blocking measures at the network and endpoint levels. Monitoring for additional domains using similar naming conventions (e.g., incorporating 'zoom' or variations thereof) is recommended to preempt further abuse.