zoomcallmeeting[.]im

This domain, zoomcallmeeting.im, was identified as a high-risk brand impersonation site designed to deceive users into believing they are interacting with a legitimate Microsoft Zoom client update. The site exploits the trust associated with Microsoft and Zoom branding to trick visitors into downloading malicious software or entering sensitive credentials. Such attacks typically aim to harvest login details, install malware, or gain unauthorized access to corporate or personal systems. Analysis indicates the domain was registered on February 21, 2026, through an undisclosed registrar, and resolves to the IP address 89.163.155.33, hosted within autonomous system AS24961 in Germany. The site lacks an SSL certificate, increasing the risk of data interception during transmission. At the time of detection, 17 out of 95 security vendors on VirusTotal flagged the domain as malicious, and it appeared on three independent security blocklists, including high-confidence threat intelligence feeds. Users who visited zoomcallmeeting.im should immediately disconnect the device from the network to prevent potential lateral movement of malware. Run a full system scan using updated antivirus software to detect and remove any downloaded payloads. Change passwords for any accounts accessed from the compromised device, particularly those associated with Microsoft services, and enable multi-factor authentication where available. Monitor financial and communication accounts for unauthorized activity, and report the incident to internal security teams or relevant authorities for further investigation.