zoomsdk[.]us

Analysis of zoomsdk.us shows a domain created on 21 February 2026 that presently resolves to IP 198.49.23.145, an address owned by AS53831 Squarespace, Inc. in the United States. The HTTPS certificate is identified as R12, and the site serves HSTS headers. Detected web‑stack components include Squarespace Commerce and the core Squarespace platform, indicating the infrastructure is built on a commercial website‑builder service. The only visible HTML element is the page title “Coming Soon”, which provides no functional content.

Reputation services assign a Gridinsoft trust score of 0 out of 100, and the domain is listed on three public blocklists. It has also been flagged by the PhishDestroy, MetaMask, and SEAL filtering solutions. AlienVault OTX references the domain in two separate threat‑intel pulses, confirming its inclusion in known malicious‑activity feeds. VirusTotal scans report that 12 of 93 security vendors have flagged the domain as malicious, reinforcing the suspicion of abuse.

The domain is currently marked as offline, but the historical evidence suggests it was used for a generic phishing campaign. Because the hosting provider is a legitimate SaaS platform, the malicious actor likely leveraged a compromised or mis‑configured Squarespace site. Defenders should continue to block the domain at perimeter and DNS layers, monitor for any re‑activation, and consider adding the associated IP address to deny‑list rules. Additional investigation of the two OTX pulses may reveal payload or lure details, and any internal logs showing connections to 198.49.23.145 should be correlated for potential exposure.