soorgroup[.]ca

This domain, soorgroup.ca, is specifically flagged as a fake login phishing site. The domain is designed to mimic legitimate login pages, often targeting users by impersonating well-known services or brands to steal credentials and personal information. Once visited, users are prompted to enter sensitive data, which is then captured by the attackers.

Analysis indicates that soorgroup.ca has been flagged by 20 out of 95 security vendors on VirusTotal, suggesting a significant level of suspicion among cybersecurity professionals. The domain was registered through Go Daddy Domains Canada, Inc on June 15, 2022. It resolves to the IP address 68.66.226.89 and has been taken offline. The site has a Gridinsoft trust score of 0/100 and a Scamadviser trust score of 1/100, both indicating a high risk of malicious activity. Additionally, the domain appears on one security blocklist and is blocked by PhishDestroy. The site uses technologies such as WordPress, MySQL, PHP, and LiteSpeed, and has implemented HSTS and HTTP/3, which can make it appear more legitimate to unsuspecting users.

If users have visited soorgroup.ca, they should immediately change their passwords for any accounts they may have entered credentials into on the site. It is also recommended to monitor their accounts for any unauthorized activity and to run a full system scan using updated antivirus software. Users should report the incident to their IT department or cybersecurity team and avoid clicking on any links or providing further information to the domain.