zoomwithme[.]online

The domain zoomwithme.online, registered on March 23 2026 through GoDaddy.com, LLC, is actively used in a credential‑phishing campaign that impersonates Zoom. The site presents the page title “Launch Meeting – Zoom,” indicating a direct brand impersonation. DNS resolution points to IP address 15.197.225.128, which is hosted in the Canada region of an AWS Global Accelerator network and is fronted by Cloudflare services that enforce HSTS and support HTTP/3. A TLS certificate issued by GoDaddy.com (GoDaddy TLS Intermediate CA DV – R1v1) secures the connection, and the server returns an HTTP 301 redirect. Nameservers ns71.domaincontrol.com and ns72.domaincontrol.com are listed in the zone. The domain appears on one security blocklist and is specifically blocked by PhishDestroy. AlienVault OTX records the domain in 23 threat‑intel pulses, and VirusTotal reports that 4 of 94 scanning engines have flagged it. Risk is assessed as high and the infrastructure remains active. Defenders should add zoomwithme.online to URL filtering and endpoint allow‑list block rules, monitor for outbound connections to the associated IP address, and consider threat‑intel sharing with peers to mitigate further exploitation of the Zoom brand.