zoom-meets[.]us

This domain, zoom-meets.us, is flagged as a high-risk brand impersonation threat targeting Microsoft. The page title, 'Zoom Client Update,' suggests an attempt to deceive users into believing the site is associated with legitimate Microsoft or Zoom services. No crypto drainer kit or specific payload was identified, but the domain exhibits characteristics consistent with phishing infrastructure designed to harvest credentials or distribute malicious updates. The impersonation focuses on exploiting trust in Microsoft's brand to facilitate unauthorized access or malware distribution. Analysis indicates the domain was created on February 21, 2026, and is registered through NameSilo, LLC. It resolves to the IP address 104.225.130.131, hosted by Shock Hosting LLC (AS395092) in the United States. The domain is currently flagged by 17 out of 95 security vendors on VirusTotal, and it appears on three distinct security blocklists. No SSL certificate is present, increasing the likelihood of interception or tampering during data transmission. The domain has been blocked by PhishDestroy, MetaMask, and SEAL, indicating prior malicious activity detection. The domain is currently offline, reducing immediate risk to end users. However, the infrastructure remains a potential threat if reactivated or repurposed. Organizations should maintain blocklist entries for this domain and its associated IP address to prevent future access. Monitoring for similar domains registered through NameSilo or resolving to the same hosting provider is recommended. Users should be advised to verify domain authenticity before interacting with any communication or update prompts claiming to originate from Microsoft or Zoom services.