indi23[.]com

This domain, indi23.com, is flagged as a generic phishing site impersonating AIToolsVoorZZP.nl, a legitimate Dutch AI tools platform. The page title "AIToolsVoorZZP.nl – Onder Constructie" suggests an attempt to deceive users into believing the site is under construction while likely harvesting login credentials or deploying malicious payloads. No specific drainer kit signatures were identified, but the domain exhibits classic phishing infrastructure characteristics. Analysis indicates the domain was registered on April 28, 2026, through Fewmoretaps OU d/b/a Trustname.com, a registrar with a history of hosting malicious domains. It resolves to the IP address 94.154.172.143, and VirusTotal reports 8 out of 95 security vendors flagging it as malicious. The domain appears on 2 security blocklists, and its Gridinsoft trust score is 0/100, reinforcing its high-risk classification. Google Safe Browsing (GSB) status was not explicitly provided, but the domain is currently offline. The domain has been taken offline, likely due to detection and reporting by security systems such as PhishDestroy and Maltrail. However, residual risk remains, as threat actors may re-deploy the infrastructure under a new domain or IP. Organizations should monitor for connections to 94.154.172.143 and block the domain at the DNS level. Users who interacted with the site should reset credentials and scan for malware, particularly if they entered sensitive information.