zoomwithmothership[.]com

This domain, zoomwithmothership.com, is actively impersonating legitimate Zoom video conferencing services to conduct phishing attacks. Analysis indicates the site likely presents fake login portals or meeting invitations designed to harvest user credentials, session tokens, or other sensitive authentication details. The impersonation targets corporate and individual users who may mistake the domain for an official Zoom communication, increasing the likelihood of successful credential theft or account compromise. Infrastructure analysis reveals the domain was registered on May 30, 2026, through GoDaddy.com, LLC, and resolves to the IP address 3.33.130.190. It is currently flagged by 1 out of 95 security vendors on VirusTotal, with three distinct security blocklists—PhishDestroy, MetaMask, and SEAL—marking it as malicious. The SSL certificate, issued by GoDaddy TLS Intermediate CA DV - R1v1, does not mitigate the risk, as phishing sites frequently use valid certificates to appear legitimate. The domain remains active as of this report, with no evidence of takedown or mitigation. Users who have visited zoomwithmothership.com should immediately revoke any active sessions associated with Zoom or related services. Credentials entered on the site must be considered compromised and changed across all platforms where reused. Network administrators should block the domain and its resolving IP (3.33.130.190) at the perimeter. Endpoints that accessed the site should be scanned for malware, and any downloaded files should be treated as malicious. If financial or cryptocurrency transactions were initiated through the site, affected parties should contact their financial institution to report potential fraud.