zoommeet-us[.]com

Analysis of zoommeet-us.com indicates a generic phishing domain targeting retail consumers through the false sale of Canada Goose outerwear. The domain was registered on February 27, 2026, via HOSTINGER operations, UAB, and resolved to IP address 172.67.219.193, hosted on Cloudflare's network (AS13335). No SSL certificate was present at the time of assessment. The page title, 'CANADA GOOSE down jacket Stratus Tonal dark brown | BRAUN Hamburg,' explicitly references a luxury apparel product, suggesting an attempt to deceive users into believing the site was a legitimate retailer.

Infrastructure analysis reveals the domain was configured with Cloudflare nameservers (algin.ns.cloudflare.com and magnolia.ns.cloudflare.com), a common tactic to obscure hosting origins and evade takedowns. Detection data shows limited but actionable signals: one security vendor on VirusTotal flagged the domain, and it appeared on three independent security blocklists, including PhishDestroy, MetaMask, and SEAL. The domain has since been taken offline, though its prior activity remains a potential indicator for retrospective threat hunting. Defenders should treat this domain as part of a broader pattern of fraudulent retail sites leveraging Cloudflare's infrastructure.

While the exact phishing kit or backend remains unconfirmed, the page title provides a clear brand impersonation signal. Network defenders are advised to block the domain and IP, monitor for related registrations under the same registrar, and correlate with other Canada Goose-themed phishing domains. No evidence links this domain to credential harvesting or payment skimmers, but the absence of SSL and the use of a proxy provider align with typical phishing infrastructure.