izom[.]net

This domain, izom.net, is flagged as a high-risk generic phishing threat as of July 12, 2026, and remains active. Intelligence from multiple sources supports this assessment. The domain was registered on February 5, 2026, through Ultahost, Inc., a relatively recent registration that aligns with patterns seen in phishing infrastructure. It resolves to IP address 207.180.234.23, which is associated with the hosting infrastructure. The page title observed is 'Izom.Net Global', and the site uses Tailwind CSS, Nginx, Unpkg, and HSTS technologies. An SSL certificate from ZeroSSL GmbH is in place, which is a common choice for phishing sites to appear legitimate. The Gridinsoft trust score is 0 out of 100, indicating a strong negative assessment. The domain appears on two security blocklists and is blocked by PhishDestroy and BLP-Malware. VirusTotal reporting shows 15 out of 95 security vendors flagging this domain as malicious, a significant number that confirms the threat. Additionally, AlienVault OTX lists the domain in 23 threat intelligence pulses, further corroborating its involvement in malicious campaigns. The exact nature of the phishing campaign is not fully detailed in the available intelligence, but the generic classification suggests it may target a broad range of credentials or sensitive information. Defenders should treat this domain as actively hostile. Immediate actions include blocking all traffic to izom.net at the network perimeter and email gateway. DNS filtering should be updated to prevent resolution. Any user who has interacted with this site should be investigated for credential compromise or malware infection. Monitoring for related domains or subdomains is advisable, as threat actors often rotate infrastructure. Continuous observation of the IP address 207.180.234.23 for new malicious domains is also recommended. The domain's creation date and current active status indicate an ongoing operation that requires prompt response.