zoomqq[.]mobi

This domain, zoomqq.mobi, is flagged for elevated-risk brand impersonation targeting Zoom, a widely used video conferencing platform. Analysis indicates the infrastructure was designed to deceive users into believing they were accessing legitimate Zoom services, though the page title—'ZOOMQQ | Situs Judi Slot Pkv - Pkv Games - QQ Online'—suggests a secondary or misconfigured purpose, potentially gambling-related. The discrepancy between the impersonated brand and the displayed content raises concerns about dual-use or compromised infrastructure, though the primary threat remains brand impersonation for credential harvesting or malware distribution. Infrastructure analysis reveals the domain was registered on April 14, 2025, through Spaceship, Inc., and resolves to the IP address 128.199.218.78. VirusTotal reports 3 out of 95 security vendors flagging the domain, while Gridinsoft assigns a trust score of 0/100. The domain appears on three security blocklists and is actively blocked by MetaMask, SEAL, and PhishDestroy. Detected technologies include Microsoft ASP.NET, RequireJS, AMP, jQuery, Google Hosted Libraries, and Google Analytics, which may have been leveraged to enhance the appearance of legitimacy or track victim interactions. Mitigation against brand impersonation threats requires multi-layered defenses. Organizations should implement domain monitoring to detect newly registered domains containing their brand names, particularly those registered through high-risk registrars or with suspicious creation timelines. End users should verify domain authenticity by cross-referencing URLs with official communications and avoiding interaction with domains that deviate from known patterns. Security teams are advised to block the domain and associated IP at the network perimeter, while also educating users on recognizing impersonation tactics, such as mismatched page titles or unexpected redirects. Given the domain’s current offline status, continuous monitoring for reactivation or related infrastructure is recommended.