zohowebmeeting[.]com

PhishDestroy identifies zohowebmeeting.com as a live fake Zoom webinar phishing domain designed to harvest credentials under the guise of a legitimate meeting platform. This domain mirrors the branding and functionality of Zoom’s webinar service, likely deployed to trick users into entering sensitive login details or payment information. No evidence suggests the use of a custom drainer kit at this stage, but the infrastructure closely mimics legitimate conferencing tools to maximize deception. This domain was flagged by 1/95 VirusTotal security vendors and is blocked by MetaMask and SEAL. Technical indicators include registration through Hosting Concepts B.V. d/b/a Registrar.eu, resolution to IP 198.251.84.236, and a Let’s Encrypt SSL certificate. The domain was created on April 20, 2026, and appears on 2 security blocklists. Google Safe Browsing (GSB) has not yet marked this domain as unsafe. As of this report, zohowebmeeting.com remains active and poses an elevated risk to users. Immediate response actions include continued monitoring by security vendors and domain takedown requests where applicable. Remaining risk is elevated due to the domain’s recent creation, active infrastructure, and low detection rate. Users should avoid accessing this domain and report any suspicious activity to their security teams.