uk04webzoom[.]us

The domain uk04webzoom.us is a fraudulent site designed to impersonate the legitimate Zoom video conferencing platform, specifically targeting users in the United Kingdom through a subdomain that mimics Zoom’s official web services. The threat posed is phishing and credential theft, as the site likely attempts to deceive visitors into entering login credentials or other sensitive information under the guise of a Zoom meeting or account page.

Technical analysis from VirusTotal shows the domain is flagged by 16 out of 95 security vendors, including ADMINUSLabs, alphaMountain.ai, BitDefender, CyRadar, and ESET. The domain is hosted on IP address 23.254.129.180, located in the United States and assigned to AS54290 Hostwinds LLC. It was registered on 2025-07-21 through NameCheap, Inc., and uses nameservers dns1.registrar-servers.com and dns2.registrar-servers.com. The site has no SSL certificate, indicating a lack of encryption and further raising suspicion. It is listed on one blocklist.

As of the last check, the domain is offline and inaccessible, with a GridinSoft trust score of 0 out of 100, confirming it is malicious. Given the new registration date, high detection rate, and impersonation of a trusted brand, the risk level is high despite its current downtime, as it may be reactivated or used as a template for future attacks.