secureconnect-zohomeet[.]com

This domain, secureconnect-zohomeet.com, is currently flagged as an active credential phishing site targeting users of Zoho Meeting. Analysis indicates the domain is designed to harvest login credentials by mimicking the legitimate Zoho Meeting platform, posing a direct threat to user authentication data. Infrastructure analysis reveals the domain was registered on June 25, 2026, through HOSTINGER operations, UAB, and resolves to the IP address 82.29.199.64. It has been identified in one threat intelligence pulse on AlienVault OTX but remains unflagged by any of the 95 vendors on VirusTotal. The domain employs an SSL certificate issued by Google Trust Services and utilizes technologies such as LiteSpeed, Hostinger, and HTTP/3. The page title explicitly displays 'Zoho Meeting,' reinforcing its impersonation of the legitimate service. As of this report, secureconnect-zohomeet.com remains active and under investigation. Organizations and users are advised to block the domain and its associated IP (82.29.199.64) at the network level. Security teams should monitor for any attempts to access this domain within their environments and educate users on recognizing phishing attempts targeting collaboration platforms. No detections in public blocklists suggest this is a newly deployed threat, warranting heightened scrutiny.