support.zoom.us.vless.d165.dpdns.org

Zoom

https://support.zoom.us.vless.d165.dpdns.org Access site

Screenshot

Screenshot captured by urlscan.io on 2026-11-08T13:09 UTC: our own render of this page came back blank.

Investigate

Domain support.zoom.us.vless.d165.dpdns.org105 CT hosts on apex

urlscan

page.domain

VirusTotal

Whois

IP 104.21.55.47

urlscan

page.ip

VirusTotal

ipinfo

Greynoise

URL https://support.zoom.us.vless.d165.dpdns.org

urlscan

Wayback

archive.today

Cert WE1

crt.sh

Censys

Google CT

Phishunt analysis Beta

31 medium suspicion suspiciousheuristic risk score · not a probability

Why?

+6.1 Google Safe Browsing
+5.3 Keyword match
+5.1 Site cluster
+2.6 Brand in subdomain
+2.3 ASN reputation
+1.7 Shared IP cluster
+1.1 No CSP header
+1.1 No HSTS header
+0.9 Young certificate
+0.8 Brand + login token
+0.7 Brand in cert SAN
+0.7 Unrecognised DNS provider
+0.6 Long domain
+0.6 Deep subdomain
+0.6 Suspicious TLD
+0.3 Free CA
+0.1 External scripts

19 signals fired · detector v3.0.0

AI analysis AIBeta

Credential harvesting

Impersonates Zoom support by embedding the real zoom.us name as subdomain labels under an unrelated dpdns.org domain, behind Cloudflare. The cert lists the brand name, and the host is flagged by Google Safe Browsing as social engineering. Likely credential or support lure.

Brand in subdomainBrand + login tokenGoogle Safe Browsing

AI-generated from stored detector signals - the AI never visited the site. · 2026-11-07 · confidence 70%

Domain & Network

Whois

Registrar Gandi SAS

Network

IP 104.21.55.47 Cloudflare CDN

Country