z-zoom[.]com[.]cn

The domain z-zoom.com.cn has been identified as a brand impersonation threat specifically targeting Zoom users. This domain is currently offline, but its previous activity posed a significant risk to individuals seeking legitimate Zoom services. The domain was created on February 21, 2026, and was registered through Web Commerce Communications Limited, a registrar often associated with malicious domains. It resolved to IP address 154.195.66.109, which has been flagged by 3 out of 95 security vendors on VirusTotal, indicating a moderate but notable level of detection. Additionally, the domain appears on three security blocklists, further confirming its malicious intent.

PhishDestroy's analysis reveals that z-zoom.com.cn was designed to mimic the official Zoom platform, using a page title of 'Zoom 高效视频会议软件 高清流畅远程沟通' to deceive users into believing they were accessing a legitimate service. The absence of an SSL certificate on the domain is a major red flag, as legitimate Zoom pages always use HTTPS encryption. The domain's creation date, registrar, and IP address all point to a coordinated effort to harvest credentials from unsuspecting users. With a risk level classified as elevated, this domain posed a direct threat to personal and organizational security.

Given that z-zoom.com.cn is now offline, users should remain vigilant against similar domains that may appear in the future. It is strongly recommended to always verify the authenticity of Zoom-related websites by checking for official URLs, SSL certificates, and security warnings from browsers. Users who may have interacted with this domain should change their passwords immediately and enable multi-factor authentication on their accounts. PhishDestroy advises reporting any suspicious domains to cybersecurity authorities and maintaining up-to-date security software to protect against brand impersonation attacks.