zoomweb02-meeting[.]com

The domain zoomweb02-meeting.com is a phishing site designed to impersonate Zoom, aiming to harvest user credentials. Despite being taken down, it was flagged by 3 out of 91 vendors on VirusTotal, indicating its malicious intent. The domain was registered through NameSilo, LLC and hosted by Hawk Host Inc. in the US.

This domain was first detected by PhishDestroy shortly after its creation on June 18, 2026, and was added to public blocklists including those maintained by MetaMask and SEAL. The platform risk score of 73 out of 100 underscores its potential threat level, while an abuse score of 11 out of 100 suggests limited reported incidents prior to takedown.

The use of Let's Encrypt for SSL certification indicates an attempt to appear legitimate and secure, a common tactic among phishing sites. The swift detection and takedown of zoomweb02-meeting.com highlight the importance of rapid response in mitigating phishing threats. This case exemplifies how phishing domains can exploit the short window between registration and widespread detection, emphasizing the need for proactive threat intelligence.