drnsnz[.]org

The domain drnsnz.org was registered on February 21, 2026 through NiceNIC International Group Co., Limited and is currently listed as active. DNS resolution points to the address 206.168.149.10, which is located in the United States and belongs to AS26042 FiberState, LLC. The authoritative nameservers are ns1.iaasdns.com and ns2.iaasdns.com. An HTTP request to the site returns a 200 status code and the page title reads "Problem loading page," indicating that the web server is reachable but the expected content is not being delivered. The site is hosted behind Cloudflare and runs on the LiteSpeed web server, employing a WordPress stack with MySQL, PHP, Chart.js, Lightbox, jQuery Migrate and other standard libraries.

A valid Let’s Encrypt certificate (R12) is presented for HTTPS connections. The domain’s MX record points to drnsnz.org itself with priority 0, a configuration often used by phishing operators to send spoofed email. Security telemetry shows that one of ninety‑five VirusTotal scanners flagged the domain, it appears on a single security blocklist, and it is actively blocked by PhishDestroy. The Gridinsoft trust score of 0 out of 100 further reinforces a lack of confidence in the host’s legitimacy.

While the available data confirms the infrastructure is consistent with malicious phishing operations, the exact lure, targeted brand or payload has not been publicly disclosed, and the page content beyond the title remains unanalysed. Defenders should treat drnsnz.org as high‑risk: block DNS resolution and HTTP/HTTPS traffic to the domain and its IP, add the address to outbound deny lists, enforce TLS inspection to validate the Let’s Encrypt certificate, and monitor for any new detections on VirusTotal or other reputation services. Continuous logging of connections to the host and awareness training for users to avoid emails claiming to originate from this domain are also recommended.