zoome1-au[.]com

PhishDestroy identifies zoome1-au.com as an active credential theft domain designed to steal Zoom account credentials. This site mimics the legitimate Zoom login interface to trick users into entering their email and password, which are then harvested by attackers for unauthorized access to Zoom accounts, potential data exfiltration, or further phishing campaigns. The domain was registered on January 22, 2026, and is currently resolving to IP 188.114.97.3. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to unsuspecting victims. This domain was flagged through automated threat intelligence analysis and currently shows 0 detections out of 95 on VirusTotal, indicating it has not yet been widely recognized as malicious by antivirus engines. Registration details reveal it was created through Fewmoretaps OU d/b/a Trustname.com, a registrar known for anonymizing domain ownership. The combination of a recently created domain, low detection rates, and a misleading SSL certificate suggests this is a targeted or newly deployed credential theft campaign. If you visited zoome1-au.com or entered any Zoom credentials on this site, immediately change your Zoom password and enable two-factor authentication. Scan your device for malware using reputable antivirus software and monitor your account for unauthorized activity. Report the domain to Zoom via their official phishing reporting channels and consider revoking any third-party app permissions linked to your Zoom account. Do not use this domain or any subpages for Zoom services; always verify the URL and use the official Zoom website (zoom.us) for login.