zzommmeetinvite[.]click

The domain zzommmeetinvite.click has been identified as a high-risk credential phishing site specifically targeting users of the Zoom video conferencing platform. Analysis of the page title, "Download Zoom," indicates an intent to deceive users into divulging login credentials or downloading malicious software under the guise of legitimate Zoom services. The domain is currently offline, though prior activity suggests it was actively used in phishing campaigns. Infrastructure analysis reveals the domain was registered through NameSilo, LLC, on March 29, 2026, and resolved to the IP address 89.163.155.33. Detection metrics indicate widespread recognition of its malicious nature, with 18 of 95 security vendors on VirusTotal flagging the domain as malicious. Additionally, the domain appears on three distinct security blocklists, further corroborating its classification as a phishing threat. Technologies detected on the server include PHP, Nginx, and HTTP/3, which are commonly employed in both legitimate and malicious web infrastructure. As of the latest assessment, zzommmeetinvite.click has been taken offline, though residual risks may persist if users were previously exposed. Organizations and individuals are advised to implement proactive measures, including domain reputation monitoring, endpoint protection updates, and user education on recognizing phishing indicators. Network administrators should consider blocking the associated IP address (89.163.155.33) and monitoring for any attempts to re-establish the domain or related infrastructure. Verification of any Zoom-related communications through official channels is strongly recommended to mitigate potential credential compromise.