zoornworkspace[.]com

The domain zoornworkspace.com is involved in an account takeover scam and is currently offline. Despite being flagged by only 2 out of 93 vendors on VirusTotal, the domain has been added to public blocklists by PhishDestroy, MetaMask, and SEAL. The domain was registered with HOSTINGER operations, UAB, and hosted on an IP address in Lithuania under the organization Hostinger International Limited.

The domain's page title, 'Your domain is suspended,' suggests a phishing attempt to deceive users into providing sensitive information. The absence of an SSL certificate further indicates a lack of legitimate security measures, a common trait in phishing operations. The platform risk score of 63 out of 100 reflects a moderate threat level, but the domain's presence on multiple blocklists highlights its potential danger.

Although the domain was taken down shortly after its detection on February 26, 2026, its brief activity period underscores the importance of swift detection and response. The fact that it was flagged by only a small number of vendors on VirusTotal illustrates the challenge of identifying and mitigating phishing threats in their early stages. PhishDestroy's inclusion of zoornworkspace.com in its blocklist demonstrates proactive threat management, ensuring that users are protected even when traditional detection methods lag behind.