familyzoom[.]demitristuff[.]com

The domain familyzoom.demitristuff.com was registered through GoDaddy.com, LLC on March 23, 2026 and is currently listed as offline. DNS resolution points to 104.18.35.90, an address owned by Cloudflare, Inc. located in Canada, and the domain leverages Cloudflare services, including HTTP/3 and HTTP Strict Transport Security (HSTS). The TLS certificate presented is issued by Google Trust Services under the WE1 identifier, indicating a valid certificate chain but offering no assurance about the underlying content.

The page title returned from the site, "Launch Meeting - Zoom," suggests an attempt to lure victims into a Zoom‑related credential‑harvesting flow, consistent with the generic phishing classification. The domain resolves to two GoDaddy name servers (ns63.domaincontrol.com and ns64.domaincontrol.com) and has a Gridinsoft trust score of 0 out of 100, reflecting a severely low reputation. Detection telemetry shows that four of ninety‑four security vendors on VirusTotal flagged the site, and the domain appears on at least one public blocklist, with PhishDestroy explicitly blocking it.

No additional content analysis is available because the site is offline, leaving the exact payload and form structure unverified. Defenders should add familyzoom.demitristuff.com to URL filtering rules, monitor the associated IP address for any re‑use, and watch for re‑registration attempts. Continuous observation of Cloudflare‑associated IP ranges for similar phishing patterns is advised, as is sharing any future detections with threat‑intel communities to improve collective response.