us04webzoom[.]fun

The domain us04webzoom.fun was registered on February 21, 2026. Subsequent analysis shows the site is currently offline, indicating that the malicious infrastructure has been taken down or is no longer serving content. Independent scanning on VirusTotal recorded nine positive detections out of ninety‑three antivirus engines, confirming the presence of malicious activity. The low Gridinsoft trust score of 0/100 further reflects a high confidence of abuse.

The domain is listed on a single security blocklist and has been explicitly blocked by the PhishDestroy filtering service, demonstrating that at least one commercial anti‑phishing solution has recognized it as hostile. AlienVault OTX references the domain in one threat‑intel pulse, providing additional corroboration from the open‑source intelligence community. No further metadata such as registrar name, hosting IP address, or SSL certificate details were supplied, limiting deeper infrastructure attribution. The classification of the site as “generic phishing” derives from the supplied threat type and is not based on visual inspection of the landing page.

Because the site is offline, direct probing is not possible, but historical indicators suggest the domain was used to harvest credentials or redirect victims to malicious payloads. Defenders should continue to enforce blocklist rules that already contain us04webzoom.fun, monitor for any resurrection of the domain, and consider adding the domain to internal deny lists. Ongoing threat‑intel feeds, especially from PhishDestroy and AlienVault OTX, should be reviewed for any emerging indicators that could point to related command‑and‑control infrastructure or reuse of the same naming patterns. The combination of multiple vendor detections, a zero trust score, and explicit blocklist inclusion justifies an elevated risk rating despite the current offline state.