zoomelive[.]live

The domain zoomelive.live was registered on 15 July 2026 through NameCheap, Inc. and is served by the authoritative name servers dns1.registrar-servers.com and dns2.registrar-servers.com. DNS resolution points to the IPv4 address 162.255.119.116, which remains reachable as of the report date. The domain is classified as a generic phishing site and is currently listed as active under investigation. No public malware analysis or page content has been published, and VirusTotal has not reported any detections, but the absence of detections does not constitute assurance of safety. Infrastructure indicates a recent registration pattern consistent with fast‑flux or throwaway domains used for credential harvesting. Defenders should treat any communications referencing zoomelive.live as potentially malicious, enforce URL filtering to block the domain, and consider adding its IP address to network deny lists. Continuous monitoring of DNS queries and TLS certificates associated with the domain is recommended, as well as correlation with any observed credential‑stealing attempts targeting user accounts. Since the domain’s hosting details are limited, threat hunting should focus on traffic to the IP 162.255.119.116 and any outbound connections from internal hosts that may attempt to exfiltrate credentials through this endpoint. Analysts should also watch for future registrations that reuse the same name‑server pair or IP range, which could indicate a broader campaign.