leeabbeylondon[.]hostel[.]town

The domain leeabbeylondon.hostel.town has been confirmed as a credential harvesting phishing site targeting visitors of the legitimate Lee Abbey London hostel. Analysis indicates the domain is currently offline, though prior activity involved impersonating the official Lee Abbey London brand to deceive users into submitting login credentials or personal information. Infrastructure analysis reveals the domain resolved to IP address 172.86.104.14 and was registered through Spaceship, Inc. Security vendors flagged the domain in 16 of 95 VirusTotal scans, while Gridinsoft assigned a trust score of 0/100. The domain appears on one security blocklist and employed technologies including WordPress, MySQL, PHP, Nginx, and HTTP/3. The SSL certificate was issued by ZeroSSL GmbH, a common choice for malicious infrastructure due to its low validation requirements. Current status shows the domain has been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Organizations are advised to block the domain and associated IP 172.86.104.14 at the network perimeter. Endpoint detection rules should be updated to flag any residual connections or cached DNS entries. Users who accessed the domain should reset credentials for any accounts used during the suspected exposure window and enable multi-factor authentication where available.