zaloweb[.]vn
“Zalo web | Đăng nhập Zalo | Chat.zalo.me”
zaloweb.vn — No verificado. Resumen de las pruebas: VirusTotal 2/91 (Chong Lua Dao, Gridinsoft); PhishDestroy score 71/100.
El análisis detallado de PhishDestroy AI se mantiene en inglés para conservar el registro forense original.
On 12 July 2026, the domain zaloweb.vn was observed delivering a high‑risk generic phishing operation. The site is currently active and returned HTTP 200 when queried. The page title returned by the server is “Zalo web | Đăng nhập Zalo | Chat.zalo.me”, indicating an attempt to lure victims into a fraudulent Zalo login flow.
Technical profiling shows the domain resolves to the IP address 172.67.145.55, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative name servers are bingo.ns.cloudflare.com and ezra.ns.cloudflare.com, both Cloudflare‑operated. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 label, providing HTTPS encryption that may increase user trust.
The underlying web stack consists of WordPress running on PHP with a MySQL backend, supplemented by jQuery, Google Tag Manager, Google Hosted Libraries, Google Analytics, and Google AdSense. This technology mix is typical of compromised or replica sites used for credential harvesting. The domain appears on one security blocklist and has been flagged by PhishDestroy. VirusTotal analysis recorded a single positive detection out of 95 scanners, reinforcing the malicious classification despite a low detection count.
Given the confirmed phishing intent, defenders should block zaloweb.vn at the network perimeter and add it to endpoint deny lists. Email security gateways should be tuned to flag messages containing the domain or its URL patterns. Continuous monitoring of the IP 172.67.145.55 and the associated Cloudflare name servers is advised, as the infrastructure can be repurposed for additional malicious payloads. Users should be warned not to enter Zalo credentials on any site presenting the “Zalo web | Đăng nhập Zalo” title unless its authenticity is verified through official channels.
Proceso de respuesta ante amenazas Pipeline
Estado de la lista de bloqueados pública
Tecnologías · 11 identified
Open-source CMS powering over 40% of websites worldwide.
Open-source relational database management system.
Server-side scripting language designed for web development.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Tag management system for deploying marketing and analytics tags.
tagmanager.google.comWeb analytics service tracking website traffic and user behavior.
marketingplatform.google.comAdvertising platform — conversion and remarketing tracking pixel.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Análisis de VirusTotal
Evidencias archivadas
Datos y informes externos
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.