ux07-zoom[.]com

The domain ux07-zoom.com is assessed as a high-risk, generic phishing site impersonating the Zoom brand. This type of threat is designed to deceive users into believing they are interacting with a legitimate Zoom service, potentially leading to credential theft or other malicious activities.

Analysis indicates that this domain was created on June 06, 2026, and is currently active. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED and resolves to the IP address 172.67.183.170. The domain appears on three security blocklists and is blocked by PhishDestroy, MetaMask, and SEAL. The SSL certificate is issued by Google Trust Services / WE1, which may lend a false sense of security to unsuspecting users. VirusTotal reports that 6 out of 95 security vendors flag this domain as malicious, suggesting a moderate level of detection but also indicating that many users may still fall victim to it.

To mitigate the risk associated with this domain, users are advised to verify the URL before entering any sensitive information. Organizations should update their security policies to include this domain in their blocklists and educate employees on the signs of phishing. Network administrators can configure firewalls and DNS filters to block traffic to 172.67.183.170. Additionally, employing multi-factor authentication (MFA) can provide an additional layer of security against credential theft. Regularly monitoring for any unauthorized access attempts and reporting suspicious activity to the relevant authorities is also recommended.