zoom-f[.]com[.]cn

PhishDestroy identifies zoom-f.com.cn as a live Zoom-themed phishing domain under active investigation by cybersecurity analysts. This impostor site specifically targets unsuspecting users with a spoofed login portal designed to harvest Zoom credentials, posing a direct risk to enterprise and personal accounts alike. The threat is classified as generic_phishing due to its broad, non-targeted approach used to deceive users into entering sensitive information under false pretenses. This domain was flagged with a current risk level marked as under_investigation, indicating ongoing scrutiny by security teams. Technical indicators include a Let's Encrypt SSL certificate, domain registration through Web Commerce Communications Limited, and resolution to IP address 38.91.116.179. The domain was created on May 15, 2026, and currently remains undetected by security vendors, with VirusTotal reporting 0 detections out of 95 scans. Given the absence of blocklist entries and low trust scores, this domain represents a rapidly evolving threat vector requiring immediate attention. To mitigate exposure to this phishing campaign, users should avoid interacting with zoom-f.com.cn and verify any Zoom-related links by accessing the official site (zoom.us) directly. Enterprises are advised to deploy email filtering rules targeting domains with recent registrations and suspicious naming conventions, such as the inclusion of “zoom-f.” Additionally, security teams should monitor for credentials compromised via this domain and enforce multi-factor authentication across all Zoom accounts to reduce the impact of potential breaches. Report any suspicious activity to your security provider or PhishDestroy for further analysis.