Scan report · about 2 months agoPublic

03webzoominvite.us

172.67.129.243AS13335 · US

the page presents itself as Zoom and wears the brand's name in a host the brand does not own (03webzoominvite.us)

Engine tags
Verdict

What happened

Step by step, from what the scanner recorded.
Load 2.9 s · 20 requests
01 · Visitor opens03webzoominvite.us/invite.php?captcha
02 · Page shown
Join Meeting | Zoomstyled as Zoom · high
03 · OutcomeCredential phishingA login page wearing a brand it does not own.

Be careful — warning signs found

Automated

It presents itself as Zoom while being hosted somewhere Zoom does not own. This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first
SupportingBrand impersonation detected
Zoom · high

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteHigh confidence: brand keywords AND a password field — classic credential phishing.

Infrastructure

IP
172.67.129.243CLOUDFLARENET - Cloudflare, Inc., US · AS13335US
TLS
CN=WE1, O=Google Trust Services, C=US · expires Nov 13, 2026
14 malicious92 suspicious

Hashes & fingerprints

Page capture

Live

Title “Join Meeting | Zoom” · brand shown: Zoom (high)

Engines

7 · time to verdict

Page

HTTP
200 · Completed
Title
Join Meeting | Zoom
Load
2.88 s · 20 requests
Stack · 7CloudflareGoogle Hosted LibrariesHTTP/3jQueryLiteSpeedPHP