us80web-zoom[.]us

This domain, us80web-zoom.us, is actively engaged in phishing operations designed to impersonate Zoom meeting services. Analysis indicates the site likely deploys fake login portals or credential harvesting forms to trick users into entering sensitive account information, including passwords and multi-factor authentication codes. The infrastructure mimics legitimate Zoom branding, using subdomains and URL paths that closely resemble official meeting links, increasing the likelihood of successful deception. Infrastructure analysis reveals the domain was registered on June 08, 2026, an unusually recent creation date that aligns with known phishing campaign timelines. VirusTotal detection metrics show 15 out of 95 security vendors have flagged the domain as malicious, a significant indicator given the platform's vendor diversity. Additionally, the domain appears on three distinct security blocklists, further corroborating its classification as a high-risk threat. No legitimate hosting or service associations have been identified. Users who have visited us80web-zoom.us should immediately terminate any active sessions and avoid entering credentials. If login details were submitted, reset passwords for Zoom and any other accounts where the same credentials were reused. Enable multi-factor authentication where available and monitor accounts for unauthorized activity. System-level scans using updated security tools are recommended to detect potential malware or browser-based threats. Network administrators should block the domain at the perimeter and review logs for connections to this address.