zoomeetingvideo[.]live

Analysis of the domain zoomeetingvideo.live indicates it is actively involved in phishing operations impersonating Zoom, a widely used video conferencing platform. The domain was registered on July 20, 2026, through Spaceship, Inc., and remains operational as of July 22, 2026. Infrastructure analysis reveals the domain resolves to the IP address 31.177.109.168 and utilizes Cloudflare nameservers (bethany.ns.cloudflare.com and langston.ns.cloudflare.com), a common tactic to obscure hosting details and evade takedowns.

The domain is currently flagged on three security blocklists, including PhishDestroy, MetaMask, and SEAL, suggesting its malicious nature has been independently verified by multiple threat intelligence sources. VirusTotal detection data shows that one of 95 security vendors has flagged this domain, though the absence of broader detection does not conclusively indicate legitimacy. The domain's registration recency, combined with its presence on blocklists and its naming convention—designed to deceive users into believing it is associated with Zoom—supports the classification of high-risk phishing infrastructure.

Defenders should treat this domain as actively malicious and prioritize blocking it at the DNS or network level. Further monitoring is recommended to assess whether additional security vendors update their detection signatures or if the domain shifts to new infrastructure. At present, the exact content of the phishing page remains unanalyzed, but the domain's naming and detection patterns align with credential harvesting or malware distribution campaigns targeting Zoom users.