zoom-x[.]com

The domain zoom-x.com is identified as a brand impersonation phishing site, specifically impersonating Zoom, a popular video conferencing platform. The domain is currently offline. Analysis of the domain reveals several concerning technical indicators and a high risk level, making it a significant threat to users and organizations.

This domain is flagged by 10 of 95 security vendors on VirusTotal, indicating a moderate level of detection among the cybersecurity community. It is registered through NameSilo, LLC and resolves to the IP address 104.21.40.245. The domain was created on May 27, 2026, and appears on 3 security blocklists, further corroborating its malicious intent. The Gridinsoft trust score for this domain is 0 out of 100, reflecting a complete lack of trustworthiness. The page title, 'Zoom视频会议 - Zoom官网 | Zoom下载在线协作平台', is designed to mimic the official Zoom website, misleading users into believing they are visiting a legitimate site. The domain uses an SSL certificate from Let's Encrypt, which, while legitimate, is often employed by malicious actors to gain user trust. Technologies detected include jQuery, Google Tag Manager, Google Analytics, and Cloudflare, with the site leveraging HTTP/3 for faster loading times, potentially to enhance the user experience and reduce suspicion.

As of the latest assessment, the domain zoom-x.com is offline. However, the infrastructure and techniques used suggest a high likelihood of the domain being reactivated in the future. Users and organizations are advised to remain vigilant and avoid clicking on any links or entering credentials on any site that appears suspicious, even if it claims to be related to Zoom. IT administrators should consider implementing DNS-based filtering and updating phishing detection rules to include this domain and similar variations. Additionally, regular training on recognizing phishing attempts and verifying website authenticity is recommended to prevent potential compromise.