ous05webzoomworkspacemeeting-invitation-liveresersation3x0[.]pages[.]dev

The domain ous05webzoomworkspacemeeting-invitation-liveresersation3x0.pages.dev is a high-risk brand impersonation threat targeting Zoom. It was registered on September 02, 2020, and is currently active, attempting to deceive users into believing they are accessing a legitimate Zoom Room Reservation page. The page title explicitly reads "Zoom Room Reservation," which is a clear attempt to harvest login credentials or other sensitive information from unsuspecting victims.

Technical indicators reveal that the domain resolves to IP address 172.66.46.232 and is registered through Cloudflare, Inc. VirusTotal analysis shows only 1 out of 95 security vendors flagging this domain as malicious, indicating low detection rates. It appears on 3 security blocklists and has an SSL certificate issued by Google Trust Services / WE1, which adds a false sense of legitimacy. Google Safe Browsing status is not provided, but the low blocklist count suggests limited visibility among threat intelligence platforms.

Currently, the domain remains active and poses a significant risk to Zoom users. Security teams should immediately block access to this domain and educate users about the phishing threat. PhishDestroy recommends monitoring for similar domains and reporting any credential submissions to the appropriate incident response team. Users who may have interacted with this site should change their Zoom passwords and enable multi-factor authentication immediately.