comwww[.]hzboligang[.]com

The domain comwww.hzboligang.com is currently classified as a generic phishing site with a high risk rating. It was first observed on March 13, 2026, and remains active as of the report date, July 12, 2026. The site returns HTTP 200 and presents the page title “comwww.hzboligang.com”, indicating a likely credential‑collection landing page.

Infrastructure analysis shows the domain is registered through West263 International Limited and is hosted on the IP address 172.247.146.162, which belongs to AS40065 operated by CNSERVERS LLC in the United States. The domain uses four authoritative nameservers – ns1.myhostadmin.net through ns4.myhostadmin.net – and presents a valid Let's Encrypt R13 certificate, confirming TLS support.

Detection data reveal the domain is listed on a single security blocklist and has been blocked by PhishDestroy. VirusTotal reports a 1‑out‑of‑95 vendor detection, and Gridinsoft assigns a trust score of 0 / 100, reinforcing the malicious assessment. The combination of active hosting, low trust score, and confirmed blocklist entry supports the high‑risk designation.

While the visible page title confirms the domain’s presence, the specific content and any targeted brand impersonation have not been captured in the available intelligence. Consequently, the exact phishing lure and credential fields remain uncertain, requiring deeper content inspection or sandbox execution to determine the full scope of the campaign.

Defenders should immediately block the domain name and its resolving IP address at network perimeter devices, update intrusion‑detection signatures to include the observed nameserver pattern, and monitor for any outbound connections to the associated AS. Continuous re‑evaluation is advised in case additional indicators, such as new hosting IPs or altered certificates, appear.