nsbdr[.]com

Analysis of nsbdr.com, reported on July 19, 2026, shows a high‑risk generic phishing infrastructure that remains active. The domain resolves to IP 103.194.185.251, an address geolocated to Hong Kong, and serves HTTP 200 responses under a Let's Encrypt certificate (YR1). Registration details reveal the domain was created through July Name Limited, with authoritative nameservers ns1.julydns.com and ns2.julydns.com. VirusTotal scans indicate that 19 of 91 security vendors have flagged the site, and it currently appears on three external blocklists. Additional defensive products, including PhishDestroy, MetaMask, and SEAL, have explicitly blocked the domain. The observed page title is "frontend," but no further content analysis is available. While the available data confirms the domain’s malicious intent and active status, the specific phishing payload, target brand, or victim interaction flow have not been disclosed. Defenders should continue to block nsbdr.com at network perimeters, update intrusion detection signatures, and monitor for any traffic to 103.194.185.251. Ongoing observation is recommended to capture any future changes to the site’s content or additional infrastructure components.