linkd3[.]net

This domain, linkd3.net, is currently under investigation for credential phishing activity following its detection on one security blocklist and inclusion in a single threat intelligence pulse. Registered on March 29, 2026, through a domain registrar, the site resolves to IP address 93.95.226.253, hosted on infrastructure associated with a provider in Iceland. The domain uses nameservers ns1.dyna-ns.net and ns2.dyna-ns.net, and its MX records point to webhost.dynadot.com with a priority of 0, suggesting potential use for email-based phishing or credential harvesting operations. Analysis of the domain’s infrastructure reveals a Let’s Encrypt SSL certificate issued under the E8 intermediate, which is commonly used by both legitimate and malicious sites. The site returns an HTTP 200 status, indicating it is actively serving content, though the page title 'Home - linkd3' provides no immediate indication of impersonation. While the domain has not been flagged by VirusTotal as of this report, its presence on one blocklist and in a threat intelligence feed warrants caution. The domain’s Gridinsoft trust score of 0 out of 100 further supports the need for closer scrutiny. Defenders should treat this domain as potentially malicious until further evidence is gathered. The lack of detections on VirusTotal does not confirm safety, as phishing domains often evade initial detection. Network-level blocking is recommended for organizations, particularly those with users who may be targeted by credential harvesting campaigns. Monitoring for connections to 93.95.226.253 and the associated nameservers can help identify compromised endpoints or ongoing phishing attempts. Given the domain’s recent registration and active status, additional indicators may emerge as the investigation progresses.