zhuodashufa[.]com

Analysis of the domain zhuodashufa.com, observed on 2026-08-02, indicates active malicious infrastructure targeting users with a generic phishing campaign. Google Safe Browsing classifies the site under social engineering, reflecting its use in credential‑stealing attempts. The domain appears on a single security blocklist and is actively blocked by the PhishDestroy service, demonstrating that at least one anti‑phishing feed has identified it as malicious.

VirusTotal scans show that six of ninety‑one security vendors have flagged the domain, providing additional corroboration of its threat status. The domain resolves to the IP address 34.97.225.89, which can be used by defenders to block network traffic or to enrich threat‑intel feeds with host‑level indicators. No further technical details such as TLS certificate information, HTTP response codes, or page titles are publicly available at this time, leaving the specific content and lure mechanisms unverified.

The limited detection footprint—six vendor detections and a single blocklist entry—suggests that the campaign may be in an early stage or using a low‑visibility hosting arrangement, but the presence on Google Safe Browsing and PhishDestroy confirms that the site is considered unsafe. Defenders should add the domain and its resolved IP address to inbound and outbound filtering rules, monitor DNS queries for this name, and consider sharing the indicator with broader threat‑sharing communities. Continuous re‑evaluation is advised, as additional detections or content analysis may emerge, refining the risk profile of zhuodashufa.com.