zoom-timeline[.]com

The domain zoom-timeline.com is identified as a generic phishing site designed to impersonate the Zoom video conferencing platform. Analysis indicates the domain is currently offline, but prior activity suggests it was used to deceive users into disclosing credentials or downloading malicious content under the guise of a legitimate Zoom service. Infrastructure analysis reveals the domain was registered through Name.com, Inc. on December 24, 2025, and resolves to the IP address 216.198.79.1. The SSL certificate is issued by Let's Encrypt (R12), a common tactic among malicious domains to appear legitimate. Security vendors on VirusTotal flagged this domain, with 2 out of 95 detecting it as malicious. Additionally, the domain appears on three distinct security blocklists, further confirming its association with phishing activity. The page title, 'Zoom Timeline 2D – Website,' attempts to mimic Zoom’s branding, reinforcing the likelihood of impersonation. As of the latest assessment, zoom-timeline.com has been taken offline, reducing immediate risk to users. However, organizations and individuals should remain vigilant. It is recommended to block the domain and its associated IP (216.198.79.1) at the network level, update endpoint protection rules to include this indicator of compromise, and monitor for any resurgence or similar domains. Users who may have interacted with this site should reset credentials for Zoom or other sensitive accounts and review systems for signs of unauthorized access.