psfasteners[.]in

Analysis as of July 24 2026 indicates that the domain psfasteners.in is actively leveraged in a generic phishing operation. The site resolves to the IP address 208.91.199.71, which is hosted in the United States and belongs to ASN46606 (Unified Layer). The web server is identified as Apache HTTP Server and the connection is protected by a Let’s Encrypt R13 certificate, suggesting the use of a free SSL service to lend legitimacy. Registration details show the domain was created on February 21 2026 through Endurance Digital Domain Technology Private Limited, and the authoritative nameservers are ns1.md-77.webhostbox.net and ns2.md-77.webhostbox.net.

The page title returned by the HTTP 200 response reads “manufacturer of bicycle L key nut in Ludhiana,” a content element that does not correspond to typical victim‑targeted services, indicating the page may be a placeholder or a misdirection tactic. Threat intelligence signals include presence on one security blocklist and a specific block by PhishDestroy. VirusTotal reports 15 detections out of 95 scanned engines, and Gridinsoft assigns a trust score of zero out of one hundred, reinforcing the malicious assessment. AlienVault OTX lists the domain in a single pulse, providing additional corroboration.

While the exact phishing lure (e.g., credential harvesting page) has not been publicly disclosed, the convergence of multiple independent detections, low trust scoring, and active blocklist placement confirms a high‑risk profile. Defenders should block the domain at perimeter and DNS layers, monitor outbound connections to the associated IP, and add the indicator to internal threat feeds. Continuous re‑evaluation is advised as further payload or landing‑page details may emerge.