Phishing detection: support.zoom.us.vip.kaisarstore.dpdns.org
Zoom Screenshot
Investigate
Domain
support.zoom.us.vip.kaisarstore.dpdns.org39 CT hosts on apex
urlscan
VirusTotal
Whois
IP
188.114.96.3
ipinfo
Greynoise
URL
https://support.zoom.us.vip.kaisarstore.dpdns.org
Phishunt analysis Beta
31
medium suspicion suspiciousheuristic risk score · not a probability
Why?
- +6.1 Google Safe Browsing
- +5.3 Keyword match
- +5.1 Site cluster
- +3.4 Shared IP cluster
- +2.6 Brand in subdomain
- +1.9 ASN reputation
- +1.1 No CSP header
- +1.1 No HSTS header
- +0.8 Brand + login token
- +0.7 Brand in cert SAN
- +0.7 Bulletproof DNS
- +0.6 Long domain
- +0.6 Deep subdomain
- +0.6 Suspicious TLD
- +0.5 Young certificate
- +0.3 Free CA
- +0.2 External scripts
18 signals fired · detector v3.0.0
AI analysis AIBeta
Credential harvesting
Site impersonates Zoom support by embedding the legitimate Zoom hostname deep within a multi-level subdomain chain on an unrelated domain, designed to deceive users inspecting the URL. Loads numerous external scripts. Targets Zoom login credentials.
Brand in subdomainBrand + login tokenDeep subdomain
AI-generated from stored detector signals - the AI never visited the site. · 2026-08-30 · confidence 85%
Domain & Network
Whois
Registrar
Gandi SAS
Network
IP
188.114.96.3
Country
United States
United States
Hosting
Cloudflare, Inc.
ASN
AS13335
TLS Cert
WE1
External detection
Google Safe Browsing
GSB category: SOCIAL_ENGINEERING
CleanOpenPhish · PhishTank · TweetFeed · urlscan.io
Requests
Resources
Observables
Related websites
Report this phishing
Submit to blocklists