leroynutra[.]com

The domain leroynutra.com is currently flagged by Google Safe Browsing with a SOCIAL_ENGINEERING designation and is listed on the PhishDestroy blocklist. VirusTotal reports that 15 of 95 security vendors have identified the domain as malicious, and Gridinsoft assigns it a trust score of 0 out of 100. These indicators collectively support a high‑risk classification as a generic phishing site.

Infrastructure analysis shows the domain resolves to IP address 162.241.123.17, which is hosted in the United States and belongs to ASN 46606 (Unified Layer). The authoritative nameservers are bob.ns.cloudflare.com and dina.ns.cloudflare.com, and the site presents a valid Let's Encrypt TLS certificate. HTTP requests return a 200 status code, and the page is built on Apache HTTP Server with Bootstrap, jQuery and the prettyPhoto library, confirming a conventional web stack.

The site’s visible page title advertises "Leroy Nutrascience, manufacturing of all nutraceutical products like Oral liquid, Tablets, Capsules and Powder, Ahmedabad, Gujarat, India," suggesting an attempt to impersonate a legitimate nutraceutical manufacturer. The domain was created on March 05, 2015 and is registered through Dreamscape Networks International Pte Ltd. While the content appears to be a fabricated corporate landing page, no direct evidence of credential‑stealing forms or malicious payloads has been captured, leaving the exact phishing vector uncertain.

Defenders should add leroynutra.com to network blocklists and enforce DNS filtering to prevent resolution. Monitoring for outbound connections to 162.241.123.17 and inspecting TLS traffic for anomalous certificate usage is advised. Organizations that reference Leroy Nutrascience in legitimate communications should alert users to the spoofed domain and verify any unsolicited requests for information against known corporate channels.