land-ev[.]app

Analysis indicates that the domain land-ev.app was registered on February 23, 2026 through NiceNIC International Group Co., Limited. The domain resolves to 188.114.96.3, an address owned by AS13335 Cloudflare, Inc., located in the United States. DNS records show the authoritative name servers frank.ns.cloudflare.com and liberty.ns.cloudflare.com, confirming that Cloudflare is providing DNS and edge services. HTTP inspection returns a 301 redirect and the page title reported by crawlers is simply “Error”.

The site presents a Google Trust Services / WE1 SSL certificate, which is a publicly trusted certificate but does not imply legitimacy of the content. Security telemetry places land-ev.app on a single blocklist, specifically PhishDestroy, and the domain appears in one additional security blocklist. VirusTotal analysis shows that three of ninety‑three scanning engines have flagged the domain, indicating some detection of malicious behavior, though the majority of scanners have not raised an alert. The presence of HTTP/3 support and Cloudflare’s edge network are consistent with typical infrastructure used by phishing operators to hide origin and provide resilience.

At present, the exact payload, credential‑harvesting mechanisms, or targeted brand are not observable from the collected metadata; the only visible artifact is the generic “Error” page title, which suggests that the malicious landing page may be dynamically generated or currently unavailable. Because the domain is still active, defenders should treat land-ev.app as a high‑risk indicator. Recommended actions include adding the domain to deny‑list rules on perimeter firewalls and DNS filtering services, monitoring for any outbound connections to the 188.114.96.3 address, and reviewing logs for attempted accesses to the URL. Continuous re‑scanning with sandbox and URL‑reputation services is advised to capture any future changes in content or behavior.