Phishing detection: zoommeetcall.live

Zoom
http://zoommeetcall.live/zoom_update.apk Access site
Screenshot
Screenshot of zoommeetcall.live

Screenshot captured by urlscan.io on 2026-11-06T20:54 UTC: our own render of this page came back blank.

Investigate
Domain zoommeetcall.live2 CT hosts on apex
urlscan page.domain VirusTotal Whois

See every phishunt record for this domain

IP 201.3.225.56
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://zoommeetcall.live/zoom_update.apk
urlscan Wayback archive.today
Cert YE2
crt.sh Censys Google CT
Phishunt analysis Beta
29 low suspicionheuristic risk score · not a probability
Why?
  • +4.1 Brand in screenshot
  • +4.0 Young domain
  • +3.7 Brand in domain label
  • +3.7 Keyword match
  • +3.0 TweetFeed
  • +2.2 Country mismatch
  • +1.1 ASN reputation
  • +1.1 No CSP header
  • +1.1 No HSTS header
  • +0.9 Young certificate
  • +0.9 No registrar lock
  • +0.7 Brand in cert SAN
  • +0.7 Unrecognised DNS provider
  • +0.7 Suspicious TLD
  • +0.4 Credential path
  • +0.3 Free CA
  • +0.3 Long domain
19 signals fired · detector v3.0.0
AI analysis AIBeta
Malware delivery

Zoom-themed lookalike domain registered about a day earlier, serving a fake Zoom update Android package file. Aims to deliver malware to victims. Reported to TweetFeed; hosted in Poland.

Credential pathTweetFeedBrand in domain label
AI-generated from stored detector signals - the AI never visited the site. · 2026-11-07 · confidence 90%
Domain & Network
Whois
Registrar Dynadot Inc
Network
IP 201.3.225.56
Country PolandPoland
Hosting Ivanov Vitaliy Sergeevich
ASN AS48031
TLS Cert YE2
External detection TweetFeed
CleanGoogle Safe Browsing · OpenPhish · PhishTank · urlscan.io · SANS ISC
Report this phishing
Registrar Dynadot Inc
abuse@dynadot.com
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-11-06 22:01 UTC  ·  Last refreshed 2026-11-09 05:30 UTC