zoorn-live[.]com

This domain is flagged as a high-risk phishing site designed to impersonate legitimate hosting services. Analysis indicates the threat type is a fake hosting portal, likely intended to harvest credentials or distribute malicious payloads under the guise of a web hosting provider. The page title, 'Welcome To Hosting With Hawk Host!', suggests an attempt to mislead users into believing they are interacting with a trusted service. Infrastructure analysis reveals the domain was registered on May 22, 2026, through NameSilo, LLC, and resolves to the IP address 172.96.187.93. It appears on three security blocklists and is flagged by 14 out of 95 security vendors on VirusTotal. The domain uses a Let's Encrypt SSL certificate and employs LiteSpeed with HTTP/3 technology. Its Gridinsoft trust score is 0/100, reinforcing its malicious classification. The domain has been taken offline, but historical data confirms its use in phishing campaigns. Mitigation steps for this specific threat type include blocking the domain and its associated IP (172.96.187.93) at the network perimeter. Organizations should update endpoint protection rules to detect and prevent access to domains registered through NameSilo with similar characteristics, such as recent creation dates and low trust scores. Users should be educated to verify hosting service legitimacy by cross-referencing official domains and avoiding unsolicited hosting-related communications. If credentials were entered on this site, they should be reset immediately, and multi-factor authentication should be enforced for all accounts.