us06webinvitezoom[.]com

The domain us06webinvitezoom.com was registered on July 09, 2025 through Hosting Concepts B.V. d/b/a Registrar.eu and is hosted on the ALEXHOST SRL network (ASN200019) in Moldova, resolving to IP 176.123.0.55. The site’s page title reads “Join Meeting | Zoom,” indicating a direct attempt to imitate Zoom’s meeting invitation flow. No SSL certificate was observed, and the site’s current HTTP status is offline, having been taken down after detection.

Infrastructure analysis shows the domain uses the authoritative nameservers ns3.alexhost.md and ns4.alexhost.md, both associated with the same hosting provider. Threat intelligence flags the domain as a brand impersonation case; it appears on a single security blocklist and has been blocked by PhishDestroy. VirusTotal scans returned six detections out of ninety‑three vendors, confirming that multiple security products recognize malicious behavior.

Gridinsoft assigned a trust score of zero out of one hundred, reinforcing the low credibility of the site. While the domain is presently offline, defenders should assume the underlying infrastructure could be reused for future campaigns. Recommended mitigations include adding the domain and its associated IP address to network deny lists, monitoring for re‑registration or similar sub‑domains, and updating detection signatures to flag the specific page title pattern “Join Meeting | Zoom.” Continuous observation of the registrar’s activity and the hosting provider’s address space is advised to pre‑empt any resurgence of the impersonation campaign.