cancel
Showing results for 
Search instead for 
Did you mean: 

Does anyone know if Zoom uses journalscene.secondstreetapp.com (Possible Scam/Spam?)

kndsamuels
Newcomer
Newcomer

I keep getting emails at work that appear to be from Zoom Media

Subject Line: Action Required User Disable

with the message reading "We've temporarily deactivated your Zoom account.
At this time, you will not be able to invite or join any call/meeting.  Your account will be billable until you verify your email address  office@****.com

 

When I hover over the link it directs to a very long address that starts with http://journalscene.secondstreetapp.com/api/organization_user_email_verifications...

I am 99.9% sure this is spam but I tried to google it nothing comes up.  If it is spam, I would also like to warn others to look out for it.  Does anyone else have any insight into this or seen it before?

1 REPLY 1

exm
Newcomer
Newcomer

No, they don't. We've seen an uptick in similar emails. If you were to sandbox the URL and follow it through you'll likely end up at a ".RU" site. At least that's what we've seen. Part of the problem is that this is someone sending as Zoom and comes across as legit; that's because Zoom's SPF record is set to a soft fail and allows this to happen.