zoorns[.]us

This domain, zoorns.us, is currently being utilized as a generic phishing platform designed to deceive visitors through a deceptive parked domain facade. Analysis indicates the site presents itself as a legitimate parked page under the Hostinger DNS system, a tactic commonly employed to lower suspicion while harvesting sensitive information or redirecting users to malicious payloads. The domain does not currently host overt credential theft or crypto drainer functionality, but its infrastructure and recent creation suggest preparatory staging for future phishing campaigns, likely targeting unsuspecting users through social engineering or malvertising vectors.

Infrastructure analysis reveals multiple high-risk indicators: the domain resolves to IP address 84.32.84.32 and was registered through Hosting Concepts B.V. d/b/a Registrar.eu on February 21, 2026, an unusually future-dated creation that may indicate registry manipulation or bulk domain squatting. VirusTotal detection metrics show 2 out of 95 security vendors flagging the domain as malicious, while it appears on three independent security blocklists, including MetaMask and SEAL. The SSL certificate is issued by Let's Encrypt, providing a false sense of security, and the site employs Hostinger CDN alongside Google Analytics, suggesting an attempt to mimic legitimate web infrastructure while maintaining tracking capabilities for potential victims.

Users who have visited zoorns.us should immediately clear their browser cache and DNS resolver cache to prevent potential cached redirects. Network-level blocking at the firewall or DNS resolver is recommended, particularly for enterprise environments. No sensitive information should be entered on any page associated with this domain, and any unexpected redirects or pop-ups originating from this domain should be treated as malicious. Given the future-dated registration and active blocklisting, monitoring for renewed phishing activity under this domain or related infrastructure is strongly advised.