zooms[.]solutions

This domain is flagged as a credential harvesting phishing site targeting users through fraudulent login portals. Analysis indicates the infrastructure was designed to mimic legitimate authentication pages, likely to capture sensitive account credentials for malicious purposes. The risk level remains under investigation due to limited detection but confirmed phishing indicators. Infrastructure analysis reveals zooms.solutions was registered on June 24, 2026, through HOSTINGER operations, UAB. The domain resolved to IP address 104.21.72.123 and was subsequently taken offline. At the time of assessment, the domain appeared on one security blocklist, while VirusTotal reported 0 detections out of 95 engines. No SSL certificate was present, increasing the likelihood of interception or tampering during transmission. The absence of prior detections suggests either a newly deployed campaign or evasion techniques to avoid automated detection systems. Mitigation steps for this threat type include immediate blocking of the domain and associated IP address (104.21.72.123) at the network perimeter. Organizations should monitor for credential reuse attempts from affected users and enforce multi-factor authentication (MFA) to mitigate account compromise risks. Security teams are advised to review logs for connections to the domain or IP, particularly from endpoints that may have interacted with the phishing page. User awareness training should emphasize identifying fraudulent login portals, especially those impersonating collaboration or productivity platforms.