zoom072[.]com

This domain is flagged as a brand_impersonation threat specifically targeting Zoom, the video conferencing platform. Analysis of the page title 'Zoom Workplace アプリから参加 - Zoom' indicates an attempt to mimic legitimate Zoom meeting entry points, likely to harvest credentials or distribute malicious payloads under the guise of official Zoom services. The domain presents itself as a Japanese-language Zoom Workplace portal, increasing the risk of deception for users expecting authentic regionalized Zoom interfaces. Infrastructure analysis reveals concrete indicators of compromise. The domain was registered on February 09, 2021, through a privacy-protected registrar and currently resolves to the IPv6 address 2407:30c0:182::aa72:3402. Despite zero detections in VirusTotal's 95-engine scan, it appears on three distinct security blocklists and is proactively blocked by multiple threat intelligence platforms. The SSL certificate is issued by Google Trust Services, providing a false sense of legitimacy while the domain employs multiple third-party services including cloud infrastructure and email marketing tools. Users who accessed zoom072.com should immediately revoke any entered credentials and scan their systems for unauthorized access. Given the domain's offline status, any cached or bookmarked links should be removed. Organizations should update their security filters to block this domain and monitor for similar impersonation patterns using the detected infrastructure indicators, particularly the IPv6 resolution and associated cloud service footprints. The combination of brand mimicry, regional language targeting, and clean VirusTotal results underscores the need for multi-layered detection beyond signature-based systems.