apps-legder[.]com

apps-legder.com was registered on 29 May 2026 through MAT BAO CORPORATION. The domain resolves to 148.251.53.209, an address owned by Hetzner Online GmbH in Germany (ASN 24940). The hosting environment reports LiteSpeed web server with HTTP/3 support. SSL is provided by Let’s Encrypt (certificate identifier YE1), indicating a valid TLS handshake at the time of capture. Reputation data shows a Gridinsoft trust score of 0 / 100 and placement on a single security blocklist.

The domain is listed as blocked by PhishDestroy and 16 of 91 VirusTotal scanners have flagged it as malicious, confirming an elevated risk profile. Nameservers are ns3.royalhost.net and ns4.royalhost.net, both typical of shared hosting services. The site’s current status is offline, which limits real‑time observation, and no page title or content analysis is available. The elevated risk level assigned by internal scoring aligns with the observed vendor detections. No Safe Browsing or Open Threat Exchange entries are currently associated with the domain, reflecting a limited public footprint.

Because the site is offline, automated crawling could not retrieve HTTP status codes or page metadata, and the exact phishing lure remains unverified. The combination of recent registration, low trust score, active blocklisting, and multiple vendor detections aligns with the classification of a generic phishing infrastructure. Defenders should continue to enforce network‑level blocks for the IP 148.251.53.209 and the domain itself, update URL filtering lists, and monitor the associated nameservers for any resurgence. Additional sandbox or sinkhole analysis is recommended if the site reappears, to capture payloads or credential‑harvesting forms. Threat intelligence feeds should be refreshed to capture any new indicators tied to this infrastructure.