mshop[.]oortcircle[.]name

Analysis of the domain mshop.oortcircle.name indicates an active high‑risk generic phishing infrastructure. The site resolves to 34.223.183.12, an Amazon Web Services host (AS16509, United States). DNS is served by four AWS name servers (ns-1173.awsdns-18.org, ns-168.awsdns-21.com, ns-1838.awsdns-37.co.uk, and a fourth entry truncated in the source). The registrar listed is Amazon Registrar, Inc. An HTTPS certificate issued by Let's Encrypt (YR1) is in place, and the HTTP response code is 200. The page title returned is "OORT商城," but no further content analysis is available. Gridinsoft assigns a trust score of 0/100, and VirusTotal reports 2 of 91 security vendors flagging the domain. The site is currently blocked by PhishDestroy and appears on a single public security blocklist. Given the high risk rating, the confirmed active status, and the limited detection signals, defenders should add the domain to deny‑list controls, monitor outbound connections to the associated IP, and continue to observe any changes in detection counts or blocklist listings. The lack of publicly disclosed payload or credential‑capture mechanisms leaves the exact phishing tactics uncertain, reinforcing the need for precautionary network‑level mitigations.