land[.]rw

Retained for the record. This text repeats stored detection facts and is not presented as authored analysis.

Analysis of land.rw indicates that the domain was registered on May 20, 2025 through Inzozi Solution Limited and is hosted on the IP address 51.195.148.90. The authoritative name servers are cdns.ovh.net together with ns1.register.rw and ns2.register.rw, suggesting the infrastructure is tied to OVH’s hosting platform and a local Rwandan registrar. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service, confirming that it is currently being used for malicious purposes. VirusTotal records show that the domain was scanned by 95 independent vendors, none of which returned a detection at the time of the scan; this absence of alerts does not constitute evidence of benign behavior and should be interpreted as a lack of current signatures rather than safety. No public Safe Browsing, OTX, SSL certificate, HTTP response code, trust‑score, or page‑title information is available in the supplied intelligence, leaving those vectors unverified. The classification provided is "generic phishing," indicating the site is likely employed to harvest credentials or personal data without targeting a specific brand. Defenders should therefore treat any traffic to land.rw as suspicious and enforce block or quarantine policies. Recommended actions include adding the domain to internal deny lists, monitoring DNS queries for the listed name servers, and correlating any outbound connections to the host IP with user activity logs. Continuous re‑evaluation is advised, as additional indicators such as malware payloads, phishing page snapshots, or updated blocklist entries may emerge.