zoomproreseller[.]com

Analysis of zoomproreseller.com reveals a newly registered domain created on 06 March 2026 that was hosting a fraudulent Zoom‑related page titled “Zoom Pro”. The domain resolves to the IPv4 address 88.222.222.4, which is assigned to AS47583 Hostinger International Limited located in Lithuania. No TLS certificate is presented, indicating the site was served over plain HTTP. Registration was performed through HOSTINGER operations, UAB, and the domain uses the generic parking nameservers ns1.dns-parking.com and ns2.dns-parking.com.

Reputation checks show the domain is listed on three public blocklists and is specifically blocked by PhishDestroy, MetaMask, and SEAL. VirusTotal scans reported that two out of ninety‑four security vendors flagged the domain, reinforcing the suspicion of malicious intent. The current operational status is offline, but the historical evidence suggests it was used for a generic phishing campaign targeting Zoom users. Uncertainty remains regarding the exact payload or credential‑harvesting mechanism because the page content has not been captured.

Defenders should immediately add 88.222.222.4 to network deny lists, enforce DNS sink‑holing of zoomproreseller.com, and monitor for any residual traffic to the associated hosting provider. Blocking the domain at the firewall and configuring web filters to drop HTTP requests to the site will mitigate potential exploitation. Continuous observation of Hostinger‑owned IP ranges for similar registrations is recommended, as the infrastructure appears to be leveraged for disposable phishing sites. Organizations using Zoom should remind users to verify URLs and to avoid entering credentials on unencrypted pages.