us05webzoomworkspacemeetingreserve-live-invitation-o33c164[.]pages[.]dev

The domain us05webzoomworkspacemeetingreserve-live-invitation-o33c164.pages.dev is a brand impersonation threat targeting Zoom users. It presents a fake 'Zoom Client Update - Zoom Meetings' page designed to harvest login credentials. This phishing domain mimics Zoom's official interface to trick victims into believing they need to update their client, thereby capturing sensitive information.

Technical indicators reveal a high-risk profile. VirusTotal data shows 6 out of 95 security vendors flag this domain as malicious. The domain is registered through Cloudflare, Inc. and was created on September 02, 2020. It resolves to IP address 188.114.97.3 and uses an SSL certificate issued by Google Trust Services / WE1. The domain appears on 3 security blocklists, indicating widespread recognition as a threat. Google Safe Browsing status is not explicitly provided, but the domain's active status and blocklist presence suggest it is currently dangerous.

As of now, the threat remains active with no reported takedown. Users who encounter this domain should immediately close the page and avoid entering any personal information. Organizations should block the domain at the network level and educate employees about Zoom update scams. PhishDestroy recommends reporting the domain to Cloudflare and Google Safe Browsing for further action. Despite the domain's age, its continued operation poses a persistent risk to Zoom users worldwide.