bill-zoom[.]com

PhishDestroy identifies bill-zoom.com as a recently activated crypto-draining site masquerading as Bill.com’s free BillZoom invoice and receipt generator. Visitors risk unauthorized cryptocurrency transfers if they connect a wallet or enter financial credentials, and the page’s misleading title (“BillZoom — Free Invoice & Receipt Generator”) is designed to lower suspicion. The domain was flagged by PhishDestroy within hours of creation, highlighting the need for rapid scrutiny of newly registered invoice-themed domains.

PhishDestroy’s analysis shows bill-zoom.com resolves to 64.29.17.1, was registered on April 26, 2026, and currently shows zero detections out of 95 VirusTotal scanners. It was registered via Cloudflare and secured with a Let’s Encrypt SSL certificate, tactics often used to appear legitimate at a glance. While the absence of detections may suggest evasion, the combination of a freshly minted domain, a stolen brand identity, and a cryptocurrency-focused lure strongly indicates malicious intent.

If you visited bill-zoom.com, immediately disconnect any connected wallets, revoke any unintended token approvals, and scan your device with updated antivirus and anti-malware tools. Do not enter any sensitive information on the site. Report the domain to PhishDestroy for takedown and share your indicators with your security team. Treat this as a confirmed crypto-draining campaign until further evidence suggests otherwise.