zaloweb[.]vn
“Zalo web | Đăng nhập Zalo | Chat.zalo.me”
zaloweb.vn — Belum terverifikasi. Ringkasan bukti: VirusTotal 2/91 (Chong Lua Dao, Gridinsoft); PhishDestroy score 71/100.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
On 12 July 2026, the domain zaloweb.vn was observed delivering a high‑risk generic phishing operation. The site is currently active and returned HTTP 200 when queried. The page title returned by the server is “Zalo web | Đăng nhập Zalo | Chat.zalo.me”, indicating an attempt to lure victims into a fraudulent Zalo login flow.
Technical profiling shows the domain resolves to the IP address 172.67.145.55, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative name servers are bingo.ns.cloudflare.com and ezra.ns.cloudflare.com, both Cloudflare‑operated. The site presents a valid SSL certificate issued by Google Trust Services under the WE1 label, providing HTTPS encryption that may increase user trust.
The underlying web stack consists of WordPress running on PHP with a MySQL backend, supplemented by jQuery, Google Tag Manager, Google Hosted Libraries, Google Analytics, and Google AdSense. This technology mix is typical of compromised or replica sites used for credential harvesting. The domain appears on one security blocklist and has been flagged by PhishDestroy. VirusTotal analysis recorded a single positive detection out of 95 scanners, reinforcing the malicious classification despite a low detection count.
Given the confirmed phishing intent, defenders should block zaloweb.vn at the network perimeter and add it to endpoint deny lists. Email security gateways should be tuned to flag messages containing the domain or its URL patterns. Continuous monitoring of the IP 172.67.145.55 and the associated Cloudflare name servers is advised, as the infrastructure can be repurposed for additional malicious payloads. Users should be warned not to enter Zalo credentials on any site presenting the “Zalo web | Đăng nhập Zalo” title unless its authenticity is verified through official channels.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Teknologi · 11 identified
Open-source CMS powering over 40% of websites worldwide.
Open-source relational database management system.
Server-side scripting language designed for web development.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Tag management system for deploying marketing and analytics tags.
tagmanager.google.comWeb analytics service tracking website traffic and user behavior.
marketingplatform.google.comAdvertising platform — conversion and remarketing tracking pixel.
Web infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Analisis VirusTotal
Bukti Terarsip
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive