zoommeets[.]us

The domain zoommeets.us was created on February 28 2026 through the registrar NameSilo, LLC and resolves to the IPv4 address 104.225.130.131, which is owned by AS395092 Shock Hosting LLC located in the United States. Authoritative name servers for the zone are ns3.loominost.com, ns4.loominost.com, ns7.loominost.com, and ns8.loominost.com. No TLS certificate is configured, meaning the site does not support HTTPS and any communication would occur over unencrypted HTTP. The only harvested page metadata is the HTML title “Zoom Meeting | Secure Video Conference,” a clear attempt to mimic a legitimate video‑conference service and lure users into credential submission.

VirusTotal analysis recorded five positive detections out of ninety‑three scanners, indicating that multiple security engines have identified malicious characteristics. The domain is listed on three public blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL, reinforcing its classification as a phishing infrastructure. Current operational status is offline, which limits immediate interaction but does not eliminate the risk of the underlying infrastructure being reused or the domain being re‑registered for future campaigns. Defenders should incorporate zoommeets.us into DNS, proxy, and URL filtering rules, enforce blocking of its resolved IP address and associated name‑server ranges, and monitor the hosting ASN for any anomalous traffic.

Because the site lacks SSL, network‑level inspection can capture the clear‑text payload if the domain becomes active again. Continuous telemetry on the hosting provider, registrar activity, and any emergence of similarly named domains targeting the same brand is recommended. Until the indicator is retired, it should be treated as elevated‑risk and retained in threat‑intel feeds for correlation with related phishing attempts.