zoom-for-windows[.]com

zoom-for-windows.com is an active brand‑impersonation site that claims to offer a “Zoom for Windows – Download Zoom Windows App Free (Official Guide)”. The page title is the only visible content; the site does not appear to host any Zoom‑related binaries and instead targets the brand “blur”. The domain was registered on 12 Mar 2026 through Squarespace Domains LLC and is hosted on Amazon’s AS16509 infrastructure (IP 216.198.79.1, United States). DNS resolves to three Google Cloud DNS name servers (ns‑cloud‑d1/2/3.googledomains.com). The site serves a TLS certificate from Let’s Encrypt (R12) and returns an HTTP 307 redirect, a pattern often used to forward victims to malicious payloads. AlienVault OTX lists the domain in one pulse, and three of ninety‑four VirusTotal scanners have flagged it. It is currently listed on three public blocklists and has a Gridinsoft trust score of 0 / 100. Defenders should add the domain to URL filtering and web‑proxy blocklists, monitor DNS queries for the associated IP and name‑servers, and enforce endpoint protection that can detect the redirection behavior. Because the actual landing page content has not been examined, the precise payload or credential‑harvesting mechanism remains unknown; further sandbox analysis of the redirected URL is recommended.