appindubai[.]com

This domain, appindubai.com, is flagged as an active credential harvesting phishing site. Analysis indicates it is currently operational and designed to collect sensitive login credentials from unsuspecting users. No specific brand impersonation has been confirmed, but the infrastructure aligns with generic phishing campaigns targeting regional or service-based logins. Infrastructure analysis reveals the domain was registered on December 04, 2024, through One.com A/S. It resolves to the IP address 141.11.243.141 and uses a Let's Encrypt SSL certificate. The domain has been flagged by 10 of 95 security vendors on VirusTotal, with no additional blocklist entries or trust scores reported. The rapid detection rate and recent creation date suggest a coordinated effort to evade initial security filters. Current status confirms the domain remains active and unresolved by the registrar. Organizations and users are advised to block the domain and IP at the network level. Endpoint protection should be updated to include this indicator of compromise. Security teams should monitor for connections to 141.11.243.141 and review logs for any interaction with appindubai.com. If credentials were entered on this site, immediate password resets and multi-factor authentication enforcement are recommended for affected accounts.