Phishing detection: zoom-security.berlin

Zoom
http://zoom-security.berlin Access site
Screenshot
Screenshot of zoom-security.berlin
Investigate
Domain zoom-security.berlin0 CT hosts on apex
urlscan page.domain VirusTotal Whois
IP 81.169.145.105
urlscan page.ip VirusTotal ipinfo Greynoise
URL http://zoom-security.berlin
urlscan Wayback archive.today
Cert -
crt.sh Censys Google CT
Phishunt analysis Beta
19 noiseheuristic risk score · not a probability
Brand in domain labelBrand + login tokenHigh entropy
14 signals fired · detector v2.0.0
AI analysis AIBeta
Credential harvesting

Combosquats the Zoom brand by appending security under the .berlin TLD on German hosting. Flagged by TweetFeed, the domain mimics Zoom security communications and is likely used to harvest account credentials or distribute phishing content to targeted users.

Brand + login tokenTweetFeedBrand in domain label
AI-generated from stored detector signals - the AI never visited the site. · 2026-07-28 · confidence 63%
Domain & Network
Whois
Network
IP 81.169.145.105
Country GermanyGermany
Hosting Strato GmbH
ASN AS6724
TLS Cert -
External detection TweetFeed
CleanGoogle Safe Browsing · OpenPhish · PhishTank · urlscan.io
Report this phishing
Submit to blocklists
Google Safe Browsing Microsoft SmartScreen APWG PhishTank
Not phishing? Dispute this detection

Tracked from 2026-07-28 03:04 UTC  ·  Last refreshed 2026-08-04 19:30 UTC