clientmeetingzoomspace[.]com

Analysis of the domain clientmeetingzoomspace.com indicates a high-risk phishing infrastructure impersonating a Zoom meeting portal. The domain was registered on June 12, 2026, through HOSTINGER operations, UAB, and currently resolves to the IP address 195.179.237.111. This IP and domain appear on three security blocklists, including PhishDestroy, MetaMask, and SEAL, signaling active malicious classification by multiple threat intelligence platforms. VirusTotal reports that 16 out of 91 security vendors flag the domain as malicious, providing further evidence of its fraudulent nature. Infrastructure analysis reveals the domain is hosted on a provider commonly associated with phishing campaigns, though no specific autonomous system number (ASN) or hosting country details are currently available.

The domain's recent creation date, combined with its presence on multiple blocklists within weeks of registration, suggests a deliberate attempt to deceive users by mimicking legitimate Zoom meeting services. The exact content of the site has not yet been analyzed, so the specific phishing mechanism—such as credential harvesting, malware distribution, or fraudulent meeting links—remains unconfirmed. Defenders should treat this domain as actively malicious. Network-level blocking is recommended for organizations, particularly those using Zoom or similar collaboration tools.

Security teams should monitor for connections to 195.179.237.111 and the domain itself in logs, as these may indicate compromised endpoints or successful phishing attempts. Given the domain's presence on MetaMask's blocklist, cryptocurrency-related activity cannot be ruled out, and users should be cautioned against interacting with any wallet-related prompts. No SSL certificate details or HTTP response data are currently available, so further technical analysis is required to assess encryption or server behavior. The domain remains active as of July 29, 2026, and should be considered a live threat.