# zoorn-lives.com — SUSPICIOUS

> Low-risk phishing detected from zoorn-lives.com. Stay alert and avoid this site to protect your data. Act now to safeguard your accounts.

## Summary
PhishDestroy identifies zoorn-lives.com as an active phishing domain classified under generic phishing threats. The domain was registered recently on March 02, 2026, which is a common trait for fraudulent sites aiming to exploit unsuspecting users. Although the overall risk level is considered low, the domain’s behavior still warrants vigilance due to its phishing classification.

Technical analysis reveals that zoorn-lives.com is registered through NameSilo, LLC, a registrar sometimes abused by threat actors for ephemeral domains. The domain resolves to the IP address 198.252.102.177, which has not been heavily blacklisted but is linked to suspicious activity in past investigations. VirusTotal scans show 2 out of 95 security engines flag this domain, indicating some but limited consensus on its malicious nature. These indicators suggest the domain is part of a low-profile phishing infrastructure designed to evade broad detection.

Currently, zoorn-lives.com remains active with no signs of takedown or remediation. Users and network administrators should block access and monitor for any phishing attempts originating from this domain. PhishDestroy recommends immediate caution, continuous monitoring, and deployment of anti-phishing measures to protect sensitive information against possible exploitation via this domain.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Welcome To Hosting With Hawk Host!

## Domain Intelligence
- Registered: 2026-03-04 15:07:01
- Registrar: NameSilo, LLC
- Country: US
- IP: 198.252.102.177
- IP Country: US
- IP City: Dallas
- IP Org: AS20068 Hawk Host Inc.
- Nameservers: ns1.hawkhost.com ns2.hawkhost.com
- SSL Issuer: none

## Detection Status
- VirusTotal: 2 vendors flagged
  Vendors: ["Seclookup", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/ymgyWSGp/e9b66e78dd2e.png
- Cloudflare Radar: https://radar.cloudflare.com/scan/7ddabc17-3945-425c-8f8b-632747904dbf
- PhishDestroy: https://phishdestroy.io/domain/zoorn-lives.com/
- LLM endpoint: https://phishdestroy.io/domain/zoorn-lives.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/zoorn-lives.com/
Last updated: 2026-03-19