Suspicious

Phishings targeting Zoom

Suspicious and active websites


Phishings targeting Zoom

Suspicious and active websites


Website
zoom.us
About
AIMeeting-software lure. Fake 'meeting recording' or 'calendar invite' pages typically route to Microsoft 365 or Google credential harvest pages.
Countries
RussiaRussia (34) · United StatesUnited States (14) · The NetherlandsThe Netherlands (2)
TLS certs
Let's Encrypt (4) · WE1 (2) · R13 (2)
Historical record. phishunt is not tracking any active Zoom phishing site right now; the 65 entries below are from the 365-day archive (sites taken down, cleaned up, or otherwise inactive). Use them for retrospective analysis, not as a current threat-feed signal.
First seen URL IP Cert Detail
2026-08-30 https://support.zoom.us.vip.kaisarstore.dpdns.org 188.114.96.3 WE1 Archived
2026-08-30 https://support.zoom.us.pro.kaisarstore.dpdns.org 188.114.97.3 WE1 Archived
2026-08-17 http://update50lite.net/zoom.us/windows/invite.php - - Archived
2026-08-17 http://invitee-io.com/zoom.us/windows/invite.php - - Archived
2026-08-17 http://web-zorm.com/zoom.us/windows/invite.php 91.195.240.123 - Archived
2026-08-17 http://08updatedlive.com/zoom.us/windows/invite.php - - Archived
2026-08-17 http://08liv3zorn-update3.com/zoom.space/windows/invite.php 198.252.106.250 - Archived
2026-08-17 http://06updatelive.xyz/zoom.us/windows/invite.php - - Archived
2026-08-17 http://web-meets.com/zoom.us/windows/invite.php 198.252.102.52 - Archived
2026-08-17 http://invitee-us.com/zoom.us/windows/invite.php 162.213.255.48 - Archived
2026-08-17 http://updatelivemeet.com/zoom.us/windows/invite.php - - Archived
2026-08-16 http://findmyapple-devices.co/script/zoom_map_2026_passcode6_login/co… 130.49.186.117 - Archived
2026-08-16 https://devicelocate.network/script/zoom_map_2026_passcode6_login/com… 130.49.186.117 - Archived
2026-08-16 http://lost-live.help/script/zoom_map_2026_passcode6_login/components… 130.49.186.117 - Archived
2026-08-16 http://lostdevice.co/script/zoom_map_2026_passcode6_login/components/… 130.49.186.117 - Archived
2026-08-16 http://lostapple-alert.live/script/zoom_map_2026_passcode6_login/comp… 130.49.186.117 - Archived
2026-08-16 http://supports-appie.com.tr/script/zoom_map_2026_passcode6_login/com… 130.49.186.117 - Archived
2026-08-16 http://apple.es-co.my/app/webroot/script/zoom_map_2026_passcode6_logi… 130.49.186.117 - Archived
2026-08-16 https://maps-apple.id/script/zoom_map_2026_passcode6_login/components… - - Archived
2026-08-16 http://findmydevice-locater.com/script/zoom_map_2026_passcode6_login/… 130.49.186.117 - Archived
2026-08-16 https://com-v.dev/script/zoom_map_2026_passcode6_login/components/2026 130.49.186.117 - Archived
2026-08-16 http://377618.click/script/zoom_map_2026_passcode6_login/components/2… 130.49.186.117 - Archived
2026-08-16 https://photos-shared.live/script/zoom_map_2026_passcode6_login/compo… 130.49.186.117 - Archived
2026-08-16 http://find-my-device.us/app/webroot/script/zoom_map_2026_passcode6_l… 130.49.186.117 - Archived
2026-08-16 http://apple-inc.com.tr/script/zoom_map_2026_passcode6_login/componen… 130.49.186.117 - Archived
2026-08-16 http://i-find.my/script/zoom_map_2026_passcode6_login/components/2026 130.49.186.117 - Archived
2026-08-16 https://soporteinfo.click/script/zoom_map_2026_passcode6_login/compon… 130.49.186.117 - Archived
2026-08-16 http://supports-location.help/script/zoom_map_2026_passcode6_login/co… 130.49.186.117 - Archived
2026-08-16 https://xiaomi-help.sbs/script/zoom_map_2026_passcode6_login/componen… 130.49.186.117 - Archived
2026-08-16 https://mail.iremoval.us/script/zoom_map_2026_passcode6_login/compone… 130.49.186.117 - Archived
2026-08-16 http://buscarmi.es-co.my/script/zoom_map_2026_passcode6_login/compone… 130.49.186.117 - Archived
2026-08-16 http://support-lost-alert.live/script/zoom_map_2026_passcode6_login/c… 130.49.186.117 - Archived
2026-08-16 https://soporte-info.click/script/zoom_map_2026_passcode6_login/compo… 130.49.186.117 - Archived
2026-08-16 https://apple-support-net.in/script/zoom_map_2026_passcode6_login/com… 130.49.186.117 - Archived
2026-08-16 https://lostdevice-live.help/script/zoom_map_2026_passcode6_login/com… 130.49.186.117 - Archived
2026-08-16 https://lcloud.ve-s.com/script/zoom_map_2026_passcode6_login/componen… 130.49.186.117 - Archived
2026-08-16 https://zu7pl.pro/script/zoom_map_2026_passcode6_login/components/2026 130.49.186.117 - Archived
2026-08-16 https://iremoval.us/script/zoom_map_2026_passcode6_login/components/2… 130.49.186.117 - Archived
2026-08-16 https://soporte.world/script/zoom_map_2026_passcode6_login/components… 130.49.186.117 - Archived
2026-08-16 https://support-lostdevice.live/script/zoom_map_2026_passcode6_login/… 130.49.186.117 - Archived
2026-08-16 https://com-ec.app/script/zoom_map_2026_passcode6_login/components/20… 130.49.186.117 - Archived
2026-08-16 http://support-location-in.live/script/zoom_map_2026_passcode6_login/… 130.49.186.117 - Archived
2026-08-16 http://findhub.click/script/zoom_map_2026_passcode6_login/components/… 130.49.186.117 - Archived
2026-08-16 http://suport-lcloud.com.tr/script/zoom_map_2026_passcode6_login/comp… 130.49.186.117 - Archived
2026-08-16 http://account-apple.com.tr/script/zoom_map_2026_passcode6_login/comp… 130.49.186.117 - Archived
2026-08-16 http://locatedevices.app/script/zoom_map_2026_passcode6_login/compone… 130.49.186.117 - Archived
2026-08-16 https://es-co.my/script/zoom_map_2026_passcode6_login/components/2026 - - Archived
2026-07-28 http://zoom-security.berlin 81.169.145.105 - Archived
2026-07-19 https://secure-page-editor--zoomwipess.replit.app/?email= 34.117.33.233 - Archived
2026-07-14 https://live.view-zoom.us 188.114.96.3 Let's Encrypt Archived

Showing the most recent 50 of 65 archived records.

AIHow to verify a real Zoom URL

  • Legitimate Zoom URLs always end in zoom.us (e.g. www.zoom.us, account.zoom.us). Anything else — including look-alike typosquats, hyphenated variations, or unfamiliar TLDs like .xyz / .top / .vip — is not Zoom.
  • The padlock icon proves TLS is active, not that the site is safe. Free DV certificates are issued to attackers in minutes; every active site listed above has a valid TLS certificate.
  • If you got the link from email, SMS, or social media, do not click it. Open zoom.us from your browser bookmark or type the domain manually.
  • Real Zoom pages almost never ask for credentials immediately after clicking from a message — treat any such redirect as a phishing attempt until the domain is verified.