zoominvitejoin[.]site

The domain zoominvitejoin.site is designed to impersonate Zoom invitations, a popular target for phishing attacks. Despite being taken down, it has been flagged by 2 out of 91 vendors on VirusTotal, indicating its malicious nature. The domain is also listed on public blocklists from PhishDestroy, MetaMask, and SEAL, underscoring its threat level.

Registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, the domain was hosted on an IP address associated with Amazon.com, Inc. in the United States. The SSL certificate was issued by Let's Encrypt, a common choice for malicious actors due to its ease of access and cost-free nature. The domain was created on June 18, 2026, and PhishDestroy detected it just two days later, on June 20, 2026.

With a platform risk score of 88 out of 100, zoominvitejoin.site represents a significant threat, particularly in the critical early days following its registration. Phishing domains like this often exploit the time lag between registration and detection by antivirus databases, which can range from 24 to 72 hours. PhishDestroy's proactive detection capabilities are crucial in identifying such threats before they propagate widely. Even though the site is now offline, its presence on multiple blocklists serves as a reminder of its potential impact.