nus725[.]it

This domain is flagged as a generic phishing threat designed to harvest user credentials through a fraudulent login interface. The page title 'Welcome aboard' suggests an attempt to mimic legitimate service onboarding or authentication portals, likely targeting corporate or subscription-based users. Analysis indicates the site employs social engineering tactics to trick visitors into submitting sensitive information, which may include usernames, passwords, or multi-factor authentication codes. Infrastructure analysis reveals the domain was registered on January 19, 2025, through 1 Api GmbH and resolves to the IP address 104.21.80.1. Security telemetry shows the domain appears on 1 blocklist, with 2 out of 95 security vendors on VirusTotal flagging it as malicious. The Gridinsoft trust score of 0/100 further corroborates its high-risk classification. The domain has since been taken offline, but residual risk remains for users who interacted with it prior to deactivation. Users who visited nus725.it should immediately revoke any credentials entered on the site, particularly if reused across other platforms. Monitor accounts associated with the submitted information for unauthorized access attempts. Network administrators should block the domain and its resolving IP (104.21.80.1) at the perimeter. If browser sessions were active during the visit, clear cached data and reset active logins. Report the incident to relevant security teams for further investigation, including analysis of endpoint logs for potential follow-on activity.