webzoom[.]com[.]tr

This domain, webzoom.com.tr, is currently active and resolves to the IPv4 address 92.113.16.115, hosted in Germany under AS47583 (Hostinger International Limited). The authoritative nameservers are ns1.dns-parking.com and ns2.dns-parking.com, both typical of parking services. An HTTP GET returns status code 200 and the page title “Başlangıç sayfası”, while the TLS certificate is issued by Let’s Encrypt (R13). Fingerprint analysis shows the site runs PHP behind Hostinger’s CDN and negotiates HTTP/3, indicating a modern web stack rather than a custom phishing kit. The domain is classified as a brand‑impersonation campaign targeting WordPress, and three of ninety‑three VirusTotal scanners have raised detections, confirming malicious intent. It appears on one external blocklist and is already blocked by PhishDestroy. The Gridinsoft trust score of 0/100 reinforces the low credibility of the host. No public content analysis is available beyond the generic title, so the exact payload or credential‑harvesting mechanisms remain unknown. Defenders should treat webzoom.com.tr as high‑risk: block DNS resolution, add the IP address and domain to network deny lists, monitor outbound connections for HTTP/3 traffic to the host, and instrument TLS inspection to capture any hidden payloads. Continuous re‑evaluation is advised in case the site changes its infrastructure or begins serving active malware.