dysphoria[.]androiddebugbridge[.]su

This domain is currently flagged as active malicious infrastructure that has been observed delivering generic phishing content. The fully qualified domain name dysphoria.androiddebugbridge.su was recorded by VirusTotal with 12 detections out of 91 submitted scans, indicating a moderate level of vendor consensus that the site hosts malicious content. The domain is also listed on a single external blocklist and has been explicitly blocked by the PhishDestroy service, demonstrating that at least one anti‑phishing platform has taken automated mitigation action.

No public information about the hosting provider, IP address, Autonomous System Number, SSL certificate, or HTTP response details has been disclosed in the supplied intelligence, and the page title returned by HTTP requests is not available. Consequently, the exact content served by the site, the brand it attempts to impersonate, and the specific phishing workflow remain unverified. Defenders should continue to block the domain at perimeter firewalls, DNS resolvers, and proxy appliances, and should monitor for any related indicators such as the domain’s resolvers or future VirusTotal submissions.

Because the domain is already present on a blocklist and flagged by PhishDestroy, existing URL filtering solutions that reference these sources will likely already enforce protection. Organizations that employ outbound content inspection should consider adding dysphoria.androiddebugbridge.su to custom block rules to reduce the risk of credential harvesting. Threat‑intel teams should pursue additional passive DNS and WHOIS lookups to enrich the infrastructure profile and may request a sample of the landing page for deeper analysis if the site becomes reachable.