Does anyone know if Zoom uses journalscene.secondstreetapp.com (Possible Scam/Spam?)

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2024-09-03 11:28 AM
I keep getting emails at work that appear to be from Zoom Media
Subject Line: Action Required User Disable
with the message reading "We've temporarily deactivated your Zoom account.
At this time, you will not be able to invite or join any call/meeting. Your account will be billable until you verify your email address office@****.com
When I hover over the link it directs to a very long address that starts with http://journalscene.secondstreetapp.com/api/organization_user_email_verifications...
I am 99.9% sure this is spam but I tried to google it nothing comes up. If it is spam, I would also like to warn others to look out for it. Does anyone else have any insight into this or seen it before?
- Topics:
-
Other

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
2024-09-04 02:55 PM
No, they don't. We've seen an uptick in similar emails. If you were to sandbox the URL and follow it through you'll likely end up at a ".RU" site. At least that's what we've seen. Part of the problem is that this is someone sending as Zoom and comes across as legit; that's because Zoom's SPF record is set to a soft fail and allows this to happen.
