zoomid-invite898[.]com

This domain, zoomid-invite898.com, is assessed as having an elevated risk level due to its specific threat type of brand impersonation. The domain impersonates the well-known video conferencing platform, Zoom, and poses a significant risk of misleading users into divulging sensitive information or downloading malicious content.

Infrastructure analysis reveals that zoomid-invite898.com was created on September 14, 2025, and is registered through OwnRegistrar, Inc. The domain resolves to the IPv6 address 2606:4700:3036::6815:1072, which is located in the United States and is associated with AS13335 Cloudflare, Inc. Analysis on VirusTotal shows that 21 out of 95 security vendors flag this domain as malicious, indicating a notable level of suspicion among the security community. The domain appears on one security blocklist, further supporting its malicious nature. The SSL certificate is issued by Google Trust Services / WE1, which might be used to increase the credibility of the impersonation. The page title found is 'Zoom Client Update', which is a common tactic used to trick users into believing they are visiting a legitimate Zoom-related site.

To mitigate the risk posed by this domain, it is recommended to educate users about the dangers of brand impersonation and to verify the legitimacy of any Zoom-related communications or updates. Network administrators should block access to this domain at the DNS level to prevent any potential interactions. Additionally, endpoint security solutions should be updated to include this domain in their threat detection and prevention mechanisms. Regular monitoring of network traffic and user activity for any signs of compromise is also advised.