zoom-gpt[.]com

Analysis of the domain zoom-gpt.com indicates active phishing infrastructure with a high risk classification as of July 24, 2026. The domain was registered on May 8, 2023, through XServer, Inc., and currently resolves to IP address 162.43.121.115, hosted on AS131965 (Xserver Inc.) in Japan. The server returns an HTTP 200 status, suggesting the site is operational, and presents a page titled 'エックスサーバー サーバー初期ページ,' which translates to a default Xserver landing page. This title does not align with the domain name, raising suspicion of misconfigured or repurposed hosting infrastructure.

The domain is flagged by one security vendor on VirusTotal, though detection remains low (1/93), and it appears on one security blocklist, including PhishDestroy. The SSL certificate is issued by Let's Encrypt (R13), a common choice for both legitimate and malicious sites. Infrastructure analysis reveals the use of Nginx and nameservers under ns1.xserver.jp through ns5.xserver.jp, consistent with Xserver's hosting environment. Gridinsoft assigns a trust score of 0/100, reinforcing the domain's malicious classification.

While the exact phishing target or campaign remains unconfirmed, the Japanese-language page title and hosting context suggest potential targeting of Japanese-speaking users. Defenders should treat this domain as active phishing infrastructure, block access at the network level, and monitor for related domains leveraging similar hosting patterns. Further investigation into the site's content and payloads is recommended to determine the specific threat vector, though no login forms, brands, or scam categories are confirmed from the available data.