zesta[.]com

This domain, zesta.com, is identified as an active credential harvesting phishing site designed to impersonate the Zesta brand, as indicated by its page title 'Home - Zesta.' The site is currently operational and poses a high risk to users by attempting to collect sensitive login credentials through deceptive means. No legitimate association with the authentic Zesta brand has been established, and the infrastructure is actively engaged in malicious activity. Analysis of zesta.com reveals it is flagged by 2 of 95 security vendors on VirusTotal, indicating limited but confirmed detection of its phishing intent. The domain is registered through Network Solutions, LLC, and resolves to the IP address 20.48.202.164, which is hosted on Microsoft Corporation infrastructure (AS8075) located in Canada. The site appears on one security blocklist, and its SSL certificate is issued by DigiCert Inc under the intermediate authority GeoTrust TLS RSA CA G1. These technical indicators suggest a deliberately constructed phishing operation leveraging cloud-based hosting to evade initial detection. The domain remains active as of the latest verification, continuing to present a credible facade to potential victims. Organizations and individuals are advised to block access to zesta.com at the network level and update endpoint protection rules to include this domain and its associated IP address. Security teams should monitor for any attempts to access this domain within their networks, as it may indicate compromised credentials or ongoing phishing attempts. Users who may have interacted with this site should immediately reset their credentials and enable multi-factor authentication where available. Proactive measures, such as domain reputation checks and real-time monitoring of newly registered domains, are recommended to mitigate similar threats.