ylog0[.]wizaweb[.]com

This domain, ylog0.wizaweb.com, is currently active and impersonates the Outlook brand. The domain was created on January 27, 2004, and has been flagged by 13 out of 95 security vendors on VirusTotal, indicating a moderate level of suspicion. The Gridinsoft trust score for this domain is 0 out of 100, which is the lowest possible score, suggesting a significant risk. The domain resolves to the IP address 209.54.120.115, which is located in California and is part of the ASN400724, operated by EZProvider Networks, Inc. The nameservers for the domain are ns1.domaincityservers.com and ns2.domaincityservers.com, and the domain is registered through ENOM, INC. The site has a Let's Encrypt R13 SSL certificate, which is commonly used by both legitimate and malicious sites. The domain appears on two security blocklists, further reinforcing its potential threat. Defenders should be cautious and consider this domain as a high-risk candidate for credential phishing attacks, particularly targeting Outlook users. Given the active status and low trust score, it is recommended to block access to this domain and educate users about the risks of credential theft through phishing sites. Regular monitoring of network traffic and user activity for any interactions with this domain is advised to prevent potential data breaches.