connectzoommobi[.]com

PhishDestroy identifies connectzoommobi.com as an active crypto drainer masquerading as the legitimate Zoom platform. Based on seed 622859, this domain is currently under investigation with an active status. The threat involves deceiving users into connecting cryptocurrency wallets under the false pretense of a Zoom-related service, potentially leading to fund theft.

The domain connectzoommobi.com was registered on April 17, 2026, through GoDaddy.com, LLC and resolves to the IP address 8.214.27.51. As of the latest assessment, this domain has not been flagged by any of the 95 VirusTotal security vendors, indicating a delay in detection. With a creation date so recent, this domain exhibits early-stage malicious characteristics and poses an elevated risk to unsuspecting users. Its low visibility on threat intelligence platforms exacerbates the danger, allowing it to operate under the radar longer. Trust scores and blocklist counts remain unreported, but the absence of detections suggests it is still in an active deployment phase.

Given the current status of this domain, immediate caution is advised. Users are strongly recommended to avoid interacting with connectzoommobi.com or any Zoom-related services that direct them to this domain. Validate any Zoom-related domains using official channels, such as PhishDestroy’s verification tools, before providing credentials or connecting wallets. Organizations should consider blocking this domain and its associated IP address at the network perimeter to prevent potential exposure. Continuous monitoring for connections or requests to this domain is advised due to its active and evolving threat posture.