meetings-cdn-joinnow-zoom[.]com

This domain, meetings-cdn-joinnow-zoom.com, is flagged as a credential harvesting phishing site targeting users of video conferencing platforms. The infrastructure mimics legitimate meeting service domains to deceive users into entering login credentials, payment details, or other sensitive information. Analysis of the page title, about:privatebrowsing, suggests an attempt to evade detection by appearing as a blank or inactive page while still capturing input data through embedded scripts or redirects. The domain is designed to exploit trust in widely used collaboration tools, particularly during periods of high remote work activity. Infrastructure analysis reveals the domain resolves to the IP address 185.212.71.113 and was registered on May 23, 2026, through HOSTINGER operations, UAB. Detection engines on VirusTotal flagged the domain as malicious, with 4 out of 95 security vendors identifying it as phishing or fraudulent. The domain appears on three independent security blocklists, and its trust score from Gridinsoft is 0 out of 100, indicating a complete lack of legitimacy. Additional protective measures have been implemented by multiple security providers, further corroborating its malicious intent. Users who visited meetings-cdn-joinnow-zoom.com should immediately revoke any entered credentials, particularly those associated with video conferencing accounts, financial services, or single sign-on providers. It is recommended to perform a full scan of the device for malware or unauthorized access. If login details were submitted, affected accounts should be secured using multi-factor authentication and password changes. Monitoring for unauthorized transactions or communications is advised, as compromised credentials may be exploited in subsequent attacks. Network administrators should update firewall and DNS filtering rules to block the domain and its associated IP address, 185.212.71.113, to prevent further exposure within organizational environments.