zoomsecure[.]cyou
zoomsecure.cyou 피싱 및 보안 점검
“Get Zoom Workplace - Microsoft Store”
zoomsecure.cyou — 콘텐츠를 사용할 수 없음 (HTTP 502). 브랜드 사칭: Microsoft; 사기 유형: Tech Support Scam. 증거 요약: VirusTotal 2/94 (Fortinet, URLQuery); URLQuery 1 alert; Spamhaus DBL_PHISH; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. 등록기관: NameSilo.
원본 포렌식 기록을 보존하기 위해 아래의 상세 PhishDestroy AI 분석은 영어로 유지됩니다.
The domain zoomsecure.cyou is a phishing site engaged in brand impersonation, specifically targeting Microsoft under the guise of offering 'Zoom Workplace' from the Microsoft Store. This scam operates as a tech-support fraud, tricking users into believing they are accessing a legitimate software download or support service. As of the latest verification, zoomsecure.cyou has been taken offline, but it previously posed an elevated risk to visitors.
Technical analysis of zoomsecure.cyou reveals limited but notable detection: 2 of 95 VirusTotal security vendors flagged the domain, including Fortinet and URLQuery. The domain was registered through NameSilo, LLC on March 04, 2026, and resolved to the IP address 216.198.79.1, hosted on Amazon.com, Inc.'s infrastructure (AS16509) in the US. It appeared on 3 security blocklists, including PhishDestroy, MetaMask, and SEAL. No SSL certificate was present, and the observed page title was 'Get Zoom Workplace - Microsoft Store'. Nameservers were ns1.dnsowl.com, ns2.dnsowl.com, and ns3.dnsowl.com.
Users who interacted with zoomsecure.cyou should immediately change any passwords entered on the site, particularly for Microsoft or related accounts, and enable two-factor authentication (2FA) where available. Monitor accounts for unauthorized activity and report any suspected fraud to the Federal Trade Commission (FTC) or local cybercrime authorities. To report the domain, submit it to Google Safe Browsing, PhishTank, or the Anti-Phishing Working Group (APWG). If financial or personal data was compromised, consider placing a fraud alert with credit bureaus.
네트워크 보안 인텔리전스 Registrar context
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| YARAhub by abuse.ch | www.zoomsecure.cyou/ |
malware | Detects file containing Telegram Bot API |
위협 대응 Pipeline
공개 차단 목록 상태
저장된 캡처
도메인 인텔리전스
기술적 세부 사항DNS, SSL SAN, 타임스탬프
SHORTDOT 영역 · 공개 증거
.cyou
ShortDot zone evidence
ShortDot zone evidence
The linked repository preserves daily zone observations across seven ShortDot-operated TLDs, including registration volume and abuse-related indicators. This registry context is supporting background and is not an independent detection for the domain in this report.
ICANN OVERSIGHT
인증 및 RAA 상황
인증 및 RAA 상황
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
VirusTotal 분석
증거 및 외부 보고서
PD-20260304-8A6655 Recipient: abuse@namesilo.com 이 사이트로 인해 영향을 받으셨나요?
계정 자격 증명, 개인 정보 또는 결제 정보를 입력했거나 이 도메인에서 파일을 다운로드한 경우 즉시 조치를 취하세요. 다음은 사건을 신고하고 자신을 보호하는 데 도움이 되는 리소스입니다.
지역 당국에 신고하십시오
공식 사이버 범죄 연락처 또는 불만사항 초안 작성 →를 받으려면 국가를 선택하세요.