zdrama-virtual[.]icu

The domain zdrama-virtual.icu was registered on February 21, 2026 through NiceNIC International Group Co., Limited and currently resolves to the Cloudflare‑owned IP address 104.21.34.75 located in the United States (AS13335). No TLS certificate is in place, and the DNS configuration points to evelyn.ns.cloudflare.com and everton.ns.cloudflare.com, indicating reliance on Cloudflare’s infrastructure. Technical fingerprinting shows Cloudflare Browser Insights, Cloudflare services, and HTTP/3 enabled, which are typical of fast‑cached hosting but do not provide any protective validation for the content.

The site’s HTML title reads "zdrama-virtual | Programmable Communications at Global Scale," a generic phrasing that offers no clear indication of the intended victim audience or lure. VirusTotal analysis returned five positive detections out of ninety‑three scanning engines, and the domain appears on a single public blocklist, further confirming malicious classification. Independent threat‑blocking services, notably PhishDestroy, have already listed the domain, and Gridinsoft assigned a trust score of 0 out of 100, reflecting an extremely low confidence in legitimacy.

As of the report date, July 24, 2026, the site is marked offline, yet its prior activity suggests it was used for generic phishing campaigns. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any resurgence of the host IP, and consider adding the associated IP range to deny‑list rules. Analysts should also track future registration attempts of similarly patterned domains from the same registrar, as the rapid creation date and use of Cloudflare suggest a disposable‑infrastructure model common to phishing operators.