us05webzoom[.]fun

The domain us05webzoom.fun is flagged as a generic phishing infrastructure and is currently offline. Evidence from multiple security sources confirms its malicious intent: PhishDestroy has actively blocked the domain, and four of ninety‑five VirusTotal scanners have raised detections. Gridinsoft assigns the domain a trust score of zero out of one hundred, and it appears on a known security blocklist, reinforcing the assessment of elevated risk. The domain was registered through Atak Domain on 19 November 2025, a relatively recent creation date that aligns with typical phishing campaign lifecycles.

DNS resolution points to the address 94.26.255.20, which is hosted in Russia and belongs to AS49505 operated by JSC Selectel. The authoritative nameservers are ns1.fastfox.pro and ns2.fastfox.pro, both of which are commonly associated with disposable or low‑cost hosting environments used by threat actors. No SSL certificate is provisioned for the site, leaving the connection unencrypted and further indicating a hastily deployed operation. The only visible HTTP artifact is the page title "Website us05webzoom.fun is ready.

The content is to be added," suggesting the site was either a placeholder or in the early stages of deployment before being taken down. Because the site is offline, direct content analysis is not possible, and the lack of a certificate prevents verification of any potential phishing landing pages. Defenders should continue to block the domain and its associated IP address at perimeter and DNS layers, add the domain to local threat feeds, and monitor for any resurgence or re‑registration. Given the low trust score, presence on a blocklist, and confirmed detections, the domain should be treated as a confirmed phishing indicator pending further activity.