pesadoslocaliza[.]app

Analysis indicates that the domain pesadoslocaliza.app was registered on July 21 2026 through NICENIC INTERNATIONAL GROUP CO., LIMITED. The domain resolves to the IP address 185.158.133.1 and uses the authoritative name servers ns3.my-ndns.com and ns4.my-ndns.com. On VirusTotal the host was examined by 91 scanning engines; at the time of review none of the engines produced a detection. The lack of detections does not constitute validation of benign intent, as many malicious payloads remain undetected by current signatures.

The domain is currently listed on one public security blocklist and has been specifically blocked by the PhishDestroy feed, indicating that at least one external threat‑intelligence source has classified it as malicious. The activity is described as generic phishing, and the overall status is marked as active and under investigation. No additional evidence such as SSL certificates, HTTP response codes, page titles, or external reputation scores is available in the supplied data, leaving the content of the web page unverified. Defenders should treat the domain as a potential phishing vector until further investigation confirms otherwise.

Recommended actions include adding 185.158.133.1 to outbound and inbound block lists, configuring proxy or DNS filtering to deny resolution of pesadoslocaliza.app, monitoring network traffic for connections to the identified name servers, and correlating any user‑initiated requests with internal logs. Continuous ingestion of updated feeds from PhishDestroy and other anti‑phishing providers is advised to capture any changes in classification. Incident response teams should consider sampling the site in a sandboxed environment if safe, and should advise users to avoid entering credentials on any pages associated with this domain.