Security Scan Report: us06webzoomus2fj2f830440905293.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 3 domains to perform 6 HTTP transactions. The main domain is us06webzoomus2fj2f830440905293.com and was registered 1 week ago.

Submitted URL: http://us06webzoomus2fj2f830440905293.com/2661951713/invite.php

Downloads:

AI Security Verdict

Confirmed Scam

Confidence: 93%

10
Risk Score

Fake Zoom update page on an 8-day-old look-alike domain that pushes a ZoomInstaller.bat from a throwaway Netlify host — brand impersonation and malware delivery, not a real Zoom page.

Risk Factors (5)
Brand impersonation of Zoom on a mismatched, very new (8-day-old) unranked domain
Executable/installer delivery (.bat, 18 MB) rather than a legitimate vendor download
Malware payload hosted on a disposable Netlify subdomain unrelated to the claimed brand
Deceptive 'client out of date' urgency with auto-download countdown
Off-site funnel: the page's sole link sends visitors to a different registrable domain
Domain age information unavailable

Details

Page Title

Join Meeting | Zoom

Scan Type

public

Domain Name Analysis

Domain 'us06webzoomus2fj2f830440905293.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'us06webzoomus2fj2f830440905293' stretches across 30 characters split between five vowels and 9 consonants, plus 16 digits. It segments into ten words: us, 06, web, zoom, us, 2, fj, 2, f, 830440905293. Median word length comes out to 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://us06webzoomus2fj2f830440905293.com/2661951713/invite.php

Page Load Overview

0.44s
Total Load Time
79 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:59%
Script:Latin
Direction:ltr

Detection Details

Text Length:389 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software53% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
53%
social media network
35%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3104.21.63.169Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.1.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.18.0.22Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
135.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
64--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11062A42EB17285A9BC735A7937CEB209B329D007C61ADD95BECD1220CFC52B45ED2718

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:XP+wQljCNVng2e9tLnsSOfpBJz22tTH2e0PMwiP06Q:XP+w+jCPng2e9tLnsSOfpBJ6eUMwD6Q

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:15490:IYAQ4E0wYkRmuoRCUl4QNJcDKICYAIzJ8kKCIgokAnMLQIGQaOhkIAASNB0OJBoHDGaAQEBxAAYIIcAbYQTIhHkB7eQ9YGku

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7cfffee6e6fefee7
Perceptual Hash:d7545854725656dc
Difference Hash:c000000c0c08000c
Wavelet Hash:00fefec226263e02
Color Hash:#d22d9b

Other Hashes

Crop Resistant:c000000c0c08000c

Scan History

Scan history not available

Unable to load historical scan data