The domain lanndhyus.info was registered on July 27 2026 by NICENIC INTERNATIONAL GROUP CO., LIMITED and is currently resolving to the IPv4 address 185.177.239.56. DNS resolution is delegated to the Cloudflare name servers kareem.ns.cloudflare.com and vida.ns.cloudflare.com, indicating the use of a reputable CDN provider for hosting or obscuring the origin infrastructure. The domain is listed as active and has been flagged by multiple security services: it appears on one public blocklist and is actively blocked by the PhishDestroy sinkhole network.
VirusTotal analysis shows that four of ninety‑one scanning engines have raised detections against the domain, reinforcing the suspicion of malicious intent. The limited detection count suggests the payload or hosting characteristics have not yet triggered broader engine signatures, but the presence of any positive detections on a newly created domain warrants heightened scrutiny. No public SSL certificate details, HTTP response codes, or page titles have been disclosed, leaving the exact content and phishing lure undefined.
Consequently, defenders should treat lanndhyus.info as a high‑risk indicator. Recommended actions include adding the domain to inbound and outbound deny lists, monitoring DNS queries for the associated Cloudflare name servers, and correlating any traffic to the 185.177.239.56 address with existing intrusion detection signatures. Continuous re‑evaluation is advised, as future scans may reveal additional malicious components or expanded victim targeting.