uu0zoom[.]com

uu0zoom.com entered the PhishDestroy evidence set on Jul 3, 2026. The hostname explicitly references Zoom; stored content metadata identifies the same apparent target. The stored content classification is impersonation. The assembled evidence scores 71/100 (high).

Four independent sources are positive: VirusTotal, MetaMask, SEAL, and Cloudflare Radar. VirusTotal recorded 5 detections among 91 engines: alphaMountain.ai, CRDF, Fortinet, Gridinsoft, SOCRadar on Aug 3, 2026 at 02:13 UTC. MetaMask and SEAL listed the hostname in the external-blocklist snapshot on Aug 7, 2026 at 14:20 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the dga domains category; its verdict timestamp was not retained. The evidence is not unanimous. URLQuery recorded no positive detection. Google Safe Browsing returned no flag on Jul 3, 2026 at 14:05 UTC. URLScan completed without a malicious verdict (score 0) on Jul 3, 2026 at 14:00 UTC.

HTTP 502 was recorded on Aug 7, 2026 at 02:15 UTC; content was unavailable. Registration records for the domain list MAT BAO CORPORATION as the registrar and Jul 2, 2026 as the creation date. Registration preceded first observation by 0 days. At collection time, the hostname resolved to 78.40.143.94 on AS45839 (Shinjiru Technology Sdn Bhd). The recorded endpoint location is Kuala Lumpur, MY. The stored server header is LiteSpeed. Captured page title: “Problem loading page”. DOM analysis completed on Jul 3, 2026 at 14:20 UTC; stored DOM score 0/100. The evidence archive retains 2 visual captures from PhishDestroy and URLScan. IoC extraction completed on Jul 29, 2026 at 01:56 UTC; stored 0 format-validated wallet addresses and 0 Telegram indicators. TLS metadata lists Let's Encrypt as the certificate issuer with validity through Sep 30, 2026; checked Jul 3, 2026 at 16:00 UTC.

The 0/100 DOM score means that the DOM pass stored no scored indicators; it does not negate the independent source findings. Taken together, the page content and independent findings support classifying this hostname as Zoom-themed impersonation.