zoomhumanresources[.]com

This domain, zoomhumanresources.com, is actively flagged as a high-risk phishing site targeting corporate users through a fraudulent human resources portal. Registered on May 28, 2026, via a major registrar, the domain resolves to 3.33.130.190, an address associated with cloud infrastructure in Canada. The site maintains a valid SSL certificate issued by a widely trusted provider, a common tactic to lend false legitimacy to phishing pages. Analysis indicates the domain is currently operational, returning an HTTP 200 status, suggesting the phishing infrastructure remains intact and accessible to targets. Infrastructure review reveals the domain is hosted on a global content delivery network, a pattern frequently observed in phishing campaigns to evade geographic blocking and improve uptime. The domain appears on three security blocklists, including feeds from specialized anti-phishing systems, and is detected by three of ninety-five security vendors in a recent scan. While the exact phishing kit or targeted brand remains unconfirmed, the domain name explicitly impersonates a collaboration platform commonly used in enterprise environments, increasing the likelihood of successful credential harvesting or malware delivery. Defenders should treat this domain as an active threat. Network-level blocking at the IP and domain level is recommended, along with monitoring for internal traffic attempting to connect to 3.33.130.190 or zoomhumanresources.com. Security teams should review recent authentication logs for anomalous access patterns, particularly from users who may have interacted with fraudulent HR or payroll notifications. Given the domain's recent registration and continued activity, it is likely part of an ongoing campaign rather than an isolated incident. No evidence suggests this domain is affiliated with the legitimate platform it mimics.