nhbpky[.]n0c[.]world

This domain, nhbpky.n0c.world, is flagged as an active credential harvesting phishing threat. Analysis indicates the infrastructure is designed to mimic legitimate service suspension pages, specifically targeting users with fake "PlanetHoster - Suspendu" notifications to harvest login credentials or sensitive account details. Infrastructure analysis reveals the domain resolves to IP address 185.221.182.55 and currently displays a page titled "PlanetHoster - Suspendu." VirusTotal reports 0 detections across 95 security engines, suggesting the threat has not yet been widely flagged. The domain remains active with no known blocklist inclusions or trust score degradations at this time. No registrar or creation date metadata was provided in available intelligence. Mitigation steps for this specific threat type include immediate blocking of the domain and IP at perimeter security controls. Network defenders should monitor for connections to 185.221.182.55 and inspect outbound traffic for indicators of credential submission. End-user education should emphasize verification of service suspension notices through official channels rather than clicking embedded links. Security teams are advised to treat any interaction with this domain as a potential compromise and initiate credential rotation for affected accounts.