# nebulainl.com — SUSPICIOUS

> Nebulainl.com is linked to low-risk phishing activity. Stay alert and verify sources before engaging. Learn more about this domain's safety status.

## Summary
PhishDestroy identifies nebulainl.com as a domain associated with generic phishing activity, classified under a low-risk level. Although the threat is not highly aggressive, users should remain cautious when interacting with content from this domain due to potential deceptive tactics aimed at harvesting sensitive information.

The domain resolves to the IP address 66.55.159.210 and is registered through GMO Internet, Inc. It was created on February 25, 2026, making it a relatively new registration. VirusTotal analysis indicates that only 1 out of 95 security vendors flagged this domain, suggesting minimal detection but not ruling out risk. The domain's infrastructure and registration details may imply it is used for transient or opportunistic phishing campaigns.

Currently, nebulainl.com remains active and continues to pose a low-level phishing threat. PhishDestroy recommends users avoid clicking on unsolicited links related to this domain and urge organizations to implement email filtering and domain monitoring to prevent potential phishing attempts. Staying informed and vigilant is key to mitigating risks associated with such emerging threats.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: dead (HTTP 0)
- Page title: Nebulai

## Domain Intelligence
- Registered: 2026-03-04 13:07:01
- Registrar: GMO Internet Group, Inc. d/b/a Onamae.com
- Country: JP
- IP: 66.55.159.210
- IP Country: US
- IP City: Piscataway
- IP Org: AS20473 The Constant Company, LLC
- Nameservers: ["a2.share-dns.com", "b2.share-dns.net"]
- SSL Issuer: none

## Detection Status
- VirusTotal: 3 vendors flagged
  Vendors: ["Fortinet", "Gridinsoft", "SOCRadar"]
- Google Safe Browsing: clean
- Blocklists: 3 hits
  Lists: ["PhishDestroy", "MetaMask", "SEAL"]

## Evidence
- Screenshot: https://i.ibb.co/hRCRzmKK/c81a608a5292.png
- Cloudflare Radar: https://radar.cloudflare.com/domains/nebulainl.com
- Wayback Machine: https://web.archive.org/web/https://nebulainl.com
- PhishDestroy: https://phishdestroy.io/domain/nebulainl.com/
- LLM endpoint: https://phishdestroy.io/domain/nebulainl.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/nebulainl.com/
Last updated: 2026-03-19