[Lex Computer & Tech Group/LCTG] zoomcrc.com

Mon Jul 6 03:21:11 PDT 2020

To All: 

I found this in the Zoom Help Center: 
  SIP Dial String Format
  [Meeting ID].[Password].[Layout].[Host Key]@zoomcrc.com

That being said, given the BCC someone may be planting a virus to
eavesdrop. It could even be Zoom. Zoom has strived for ease of use and
features often at the expense of security such as this example [11].  

-- Mitch  

On 2020-07-05 19:27, Allan Sherman wrote:

> I suspect that the  zoomcrc.com [2] domain is not owned by zoom based on the following information.  
> 
> The "real zoom" URL appears to be zoom.us [1].  A "whois" search on the zoom.us [1] domain produces: 
> 
>> Domain Name: zoom.us [1] 
>> 
>> Registrar: GoDaddy.com, Inc. 
>> 
>> Registrant Name: Bill Lu 
>> 
>> Registrant Organization: Zoom Video Communications, Inc. 
>> 
>> Registrant Street: 55 Almaden Boulevard 
>> 
>> Registrant City: San Jose 
>> 
>> Registrant State/Province: California 
>> 
>> Registrant Postal Code: 95148 
>> 
>> Registrant phone: +1.4085086746
> 
> Checking the domain zoomcrc.com [3] shows: 
> 
>> Registrar: GoDaddy.com, LLC 
>> Registry Registrant ID: Not Available From Registry 
>> Registrant Name: Registration Private 
>> Registrant Organization: Domains By Proxy, LLC 
>> Registrant Street: DomainsByProxy.com 
>> Registrant Street: 14455 N. Hayden Road 
>> Registrant City: Scottsdale 
>> Registrant State/Province: Arizona 
>> Registrant Postal Code: 85260 
>> Registrant Country: US 
>> Registrant Phone: +1.4806242599 
>> Registrant Email: ZOOMCRC.COM at domainsbyproxy.com
> 
> DomainsByProxy.com  appears to be a business intended to hide the real identity of the owner of the URL.  I would expect that since zoom.us [1] has published the id of the URL owner, they have no reason to hide the ownership of zoomcrc, if it indeed belonged to them. 
> 
> I have no idea of the significance (if anything) of GoDaddy.com, Inc. vs GoDaddy.com, LLC.  Probably just an administrative snafu. 
> 
> Regards, 
> 
> Al 
> 
> On Sun, Jul 5, 2020 at 10:41 PM Harry Forsdick <forsdick at gmail.com> wrote: 
> 
> CHarlie, 
> 
> I believe this email address is not actually an email address, but reuse of the same syntax as email for opening a conferencing session between different conferencing systems, such as Zoom and Cisco or Polycom 
> 
> This google search gives some information about Zoomcrc.com: 
> 
> * https://www.google.com/search?q=what+is+zoomcrc&rlz=1C5CHFA_enUS873US873&oq=what+is+zoomcrc&aqs=chrome..69i57j0.5848j0j4&sourceid=chrome&ie=UTF-8
> 
> It makes reference to SIP which stands for Session Initiation Protocol which is the interoperability activity. 
> 
> Email-looking addresses to ZoomCRC look to me as benign. 
> 
> Regards, 
> 
> -- Harry 
> 
> Register to vote by mail https://turbovote.org/ 
> 
> Harry Forsdick [4]
> Lexington Photo Scanning [5]
> Town Meeting Member Precinct 7 [6]
> harry at forsdick.com
> www.forsdick.com [7]
> 
> 46 Burlington St.
> Lexington, MA 02420
> (781) 799-6002 (mobile) [8]
> meet.jit.si/HarryForsdick [9] (video)
> Click [10] to see my other websites
> 
> On Sat, Jul 4, 2020 at 4:05 PM Charles Holbrow <chholbrow at gmail.com> wrote: 
> 
> I am preparing my six-session course on the history of the atomic bomb.  I will run it through my Colgate University Zoom account.  I just found in the drafts in my email an invitation to go to me with a bcc to 94056004724 at zoomcrc.com.  I never addressed an email to 94056004724 at zoomcrc.com.  Any suggestions as to what is going on? 
> 
> Is this some kind of hack to find the meeting ID and password of the course? 
> 
> --Charlie
> 
> ===============================================
> ::The Lexington Computer and Technology Group Mailing List::
> Reply goes to sender only; Reply All to send to list.
> Send to the list: LCTG at lists.toku.us      Message archives: http://lists.toku.us/private.cgi/lctg-toku.us
> To subscribe: email lctg-subscribe at toku.us  To unsubscribe: email lctg-unsubscribe at toku.us
> Future and Past meeting information: http://LCTG.toku.us
> This message was sent to forsdick at gmail.com.
> Set your list options: http://lists.toku.us/options.cgi/lctg-toku.us/forsdick@gmail.com ===============================================
> ::The Lexington Computer and Technology Group Mailing List::
> Reply goes to sender only; Reply All to send to list.
> Send to the list: LCTG at lists.toku.us      Message archives: http://lists.toku.us/private.cgi/lctg-toku.us
> To subscribe: email lctg-subscribe at toku.us  To unsubscribe: email lctg-unsubscribe at toku.us
> Future and Past meeting information: http://LCTG.toku.us
> This message was sent to al at sherm.us.
> Set your list options: http://lists.toku.us/options.cgi/lctg-toku.us/al@sherm.us

===============================================
::The Lexington Computer and Technology Group Mailing List::
Reply goes to sender only; Reply All to send to list.
Send to the list: LCTG at lists.toku.us      Message archives:
http://lists.toku.us/private.cgi/lctg-toku.us
To subscribe: email lctg-subscribe at toku.us  To unsubscribe: email
lctg-unsubscribe at toku.us
Future and Past meeting information: http://LCTG.toku.us
This message was sent to mwolfe at vinebrook.com.
Set your list options:
http://lists.toku.us/options.cgi/lctg-toku.us/mwolfe@vinebrook.com 

Links:
------
[1] http://zoom.us
[2] https://www.webnames.ca/whois#?currentDomain=zoomcrc.com
[3] http://zoomcrc.com
[4] http://www.forsdick.com/resume/
[5] http://lexingtonphotoscan.com/
[6] http://lexingtontmma.org/
[7] http://www.forsdick.com/
[8] callto:17817996002
[9] http://meet.jit.si/HarryForsdick
[10] http://forsdick.weebly.com/home/my-websites
[11]
https://www.theverge.com/2019/7/10/20689644/apple-zoom-web-server-automatic-removal-silent-update-webcam-vulnerability
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.toku.us/private.cgi/lctg-toku.us/attachments/20200706/ca8c9ad5/attachment.html>