duapuluhempat[.]adarshmurali[.]com

Analysis indicates that the sub‑domain duapuluhempat.adarshmurali.com was registered on 22 May 2025 via GoDaddy.com, LLC and remains active as of the report date (17 July 2026). The domain is served through Cloudflare nameservers (aria.ns.cloudflare.com, watson.ns.cloudflare.com) and resolves to the IP address 188.114.97.3, which is part of Cloudflare’s edge network. The TLS certificate presented is issued by Google Trust Services under the “WE1” signing authority, indicating that HTTPS connections are correctly terminated but does not imply legitimacy of the hosted content. The domain was submitted to VirusTotal and examined by 91 scanning engines; at the time of analysis no detections were reported, though the absence of a flag does not constitute assurance of safety. The current risk classification is under investigation and the status is marked active. Because the domain’s purpose has not been publicly disclosed, its role in a generic phishing campaign remains inferred from the threat type assignment. Defenders should monitor DNS queries for the domain, block network traffic to the associated IP address, and consider adding the domain to URL filtering policies. Ongoing observation of any payloads, redirects, or credential‑harvesting pages hosted at the domain is recommended to refine the threat assessment.