Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
The recorded recipient is abuse@kurun.com.
The latest stored availability evidence still shows the domain reachable; 2 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
rb-zoom[.]com[.]cn
“ZOOM应用共享 - ZOOM最新版下载 | 在线会议屏幕实时同步”
rb-zoom.com.cn — Belum terverifikasi. Peniruan identitas merek: Zoom; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 15/91 (alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar); URLQuery 1 alert; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 95/100. Registrar: Web Commerce Communica….
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
This domain (rb-zoom.com.cn) is flagged as a high-risk brand impersonation threat targeting Zoom. Registered on May 24, 2026, through Web Commerce Communications Limited, it remains active as of July 12, 2026. The page title—'ZOOM应用共享 - ZOOM最新版下载 | 在线会议屏幕实时同步'—indicates an attempt to mimic Zoom's software distribution and screen-sharing features. Infrastructure analysis reveals the domain resolves to IP 154.26.224.195 (US, AS8796 FASTNET DATA INC), uses Nginx with HSTS and HTTP/3, and holds a Let's Encrypt R13 SSL certificate. Nameservers are a.share-dns.com, a4.share-dns.com, b.share-dns.net, and b4.share-dns.net. VirusTotal shows 3 of 91 security vendors flagging the domain, and AlienVault OTX lists it in 4 threat intelligence pulses. It appears on 3 security blocklists (PhishDestroy, MetaMask, SEAL) and receives a Gridinsoft trust score of 0/100. Defenders should treat this domain as an active phishing infrastructure; block access at network and email gateways, monitor for similar registrations under the same nameserver pattern, and educate users about unsolicited Zoom download prompts. The exact delivery method (e.g., email, search engine) is not specified in available intelligence, so additional investigation into referral sources may be warranted.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | rb-zoom.com.cn |
malicious | Sinkholed |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 3 identified
Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.
nginx.org Keyakinan 100%HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.
www.rfc-editor.org Keyakinan 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Keyakinan 100%Analisis VirusTotal
Analisis Performa Situs
Google PageSpeed Insights — mobile performance audit of rb-zoom.com.cn · checked May 28, 2026
Bukti & Laporan Eksternal
PD-20260528-C2136E Recipient: abuse@kurun.com Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive