chatidzoommeeting[.]com

Analysis of chatidzoommeeting.com indicates a high-risk phishing domain targeting user credentials under the pretext of Zoom meetings. The domain was registered on March 21, 2026, through NameSilo, LLC, and currently resolves to IP 89.163.155.33 hosted in Germany by myLoc managed IT AG. Infrastructure reveals Nginx serving content over HTTP/3 with a Let's Encrypt SSL certificate (R12), while the HTTP response code 302 suggests an active redirect mechanism. The page title 'Index of /' typically exposes directory listings, which may indicate misconfigured or intentionally exposed server contents, though the exact phishing content remains unconfirmed. Security vendors have flagged this domain, with 11 of 91 engines on VirusTotal detecting malicious activity. The domain appears on three security blocklists and is actively blocked by PhishDestroy, MetaMask, and SEAL. Nameservers ns7.privatedns.vip and ns8.privatedns.vip are consistent with bulletproof hosting patterns observed in phishing campaigns. The scam type is classified as banking phishing, though no specific financial institution is named in available data. Defenders should treat this domain as active and malicious. Network-level blocking of 89.163.155.33 and the domain itself is recommended. Organizations using Zoom or similar collaboration platforms should alert users to avoid interacting with this domain, particularly if it appears in emails or messages. Further investigation into associated infrastructure may reveal additional related domains or campaigns.