zoomteammeeting[.]im

The domain zoomteammeeting.im was identified as a brand impersonation threat, specifically targeting Zoom users. This phishing domain is now offline, but while active, it posed a significant risk by mimicking the legitimate Zoom platform to steal sensitive information. The page title 'Download Zoom' was designed to deceive visitors into downloading malicious files or entering credentials.

Analysis of the domain reveals several red flags. It was flagged by 16 of 95 security vendors on VirusTotal, indicating broad consensus on its malicious nature. The domain was registered through a redacted registrar, which is a common tactic to obscure the identity of the registrant. It resolved to IP address 89.163.155.33 and used an SSL certificate from Let's Encrypt (R13). The domain appeared on one security blocklist and was found in a single AlienVault OTX threat intelligence pulse.

Given the elevated risk level and confirmed impersonation of Zoom, users are strongly advised to avoid any interaction with this domain. If you have entered credentials or downloaded files from this site, change your Zoom password immediately and monitor for suspicious activity. Always verify the legitimacy of Zoom login pages by checking the URL carefully and using official channels. PhishDestroy recommends staying vigilant against such brand impersonation attempts.