zoom[.]allwellhealthcare[.]com

The domain zoom.allwellhealthcare.com has been identified as a site hosting a fake login threat and is currently offline. This domain appears to impersonate well-known healthcare or technology brands, which can lead to credential theft and further malicious activities. Users are advised to exercise caution and avoid interacting with this domain.

Analysis indicates that the domain zoom.allwellhealthcare.com was created on November 05, 2018, and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com. The domain resolves to the IP address 104.21.67.132 and has been flagged by 14 of 95 vendors on VirusTotal, indicating a significant level of suspicion. Additionally, the domain appears on 2 security blocklists, including PhishDestroy and OISD. The Gridinsoft trust score for this domain is 0/100, reflecting a complete lack of trustworthiness. Technologies detected on this domain include PHP, Cloudflare Browser Insights, and Cloudflare, which are often used to mask the true nature of the site and enhance its credibility.

Given the current offline status of the domain, it is recommended that organizations and individuals continue to monitor for any signs of reactivation. Security teams should ensure that all network and endpoint defenses are updated to block access to this domain. Employees and users should be educated about the risks associated with fake login sites and trained to recognize and report such threats. Regularly updating security protocols and conducting phishing simulations can further enhance protection against similar threats.