laoshunfa[.]xyz

Analysis of laoshunfa.xyz indicates that the domain was registered on June 08, 2026 through Dynadot Inc and is currently active. The domain resolves to the IP address 104.21.45.14 and is served by Cloudflare nameservers kehlani.ns.cloudflare.com and nitin.ns.cloudflare.com. VirusTotal scans have recorded 14 of 91 security vendors flagging the domain as malicious, reflecting a moderate consensus of threat detection.

The site is already blocked by the PhishDestroy service and appears on a single external security blocklist, reinforcing its classification as a phishing vector. The risk level has been assigned as high, and the threat type is identified as generic phishing. No additional public indicators such as page title, SSL certificate details, or HTTP response codes are available in the current intelligence set, leaving the exact content and lure mechanisms unverified.

Defenders should prioritize immediate mitigation by adding laoshunfa.xyz to DNS blocklists, firewall deny rules, and any endpoint protection URL filtering policies. Monitoring of the associated IP 104.21.45.14 for anomalous traffic patterns is advised, as is continued observation of the Cloudflare nameserver entries for potential changes. Given the active status and high risk rating, organizations should treat any traffic to this domain as hostile and enforce strict blocking across network perimeters and client devices.