workzora.shop

PhishDestroy first observed workzora.shop on Sep 20, 2026. Current evidence score: 95/100 (critical).

Positive findings are stored from 3 sources: VirusTotal, Spamhaus DBL, and Cloudflare Radar. VirusTotal recorded 17 detections among 89 engines: alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF, CyRadar, ESET, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft, Kaspersky, Lionic, Seclookup, SOCRadar, Sophos, VIPRE, Webroot on Sep 20, 2026 at 13:46 UTC. Spamhaus DBL: DBL_PHISH on Sep 20, 2026 at 10:30 UTC. Cloudflare Radar classified the hostname as malicious and placed it in the malware category; its verdict timestamp was not retained. Non-positive and contextual checks: AlienVault OTX listed 3 community pulse references (not vendor detections) on Sep 20, 2026 at 13:47 UTC. The separate external-blocklist snapshot contained no matches on Sep 20, 2026 at 10:20 UTC. Google Safe Browsing returned no flag on Sep 20, 2026 at 13:46 UTC. A URLScan capture is available, but no capture timestamp was recorded.

No conclusive timestamped HTTP response is stored. At collection time, the hostname resolved to 43.153.77.222 on AS132203 (Tencent Building, Kejizhongyi Avenue). The recorded endpoint location is Santa Clara, US. The evidence archive retains 1 visual capture from PhishDestroy; no page title was retained, so the captures preserve the landing-page appearance.

The record contains 3 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.