nusaindah[.]lat

Analysis of nusaindah.lat shows that the domain was registered on May 15 2026 through Dynadot LLC and is currently active. The authoritative nameservers are andy.ns.cloudflare.com and mariah.ns.cloudflare.com, indicating use of Cloudflare’s DNS service. DNS resolution points to IP 172.67.215.202, which belongs to Cloudflare, Inc., located in California. HTTP requests return a 403 status and the sole page title observed is “Just a moment…”. The site presents a valid Let’s Encrypt certificate (issuer E8). Threat intelligence sources flag the domain as high‑risk: it appears on one security blocklist, is listed in a single AlienVault OTX pulse, and four of ninety‑two VirusTotal scanners have reported detections. Additional scoring systems assign a zero‑point trust rating (Gridinsoft 0/100) and the domain is blocked by PhishDestroy. The combination of recent creation, use of reputable infrastructure, and multiple independent detections suggests an active generic phishing campaign, though the specific payload or targeted brand has not been disclosed. Defenders should enforce network‑level deny rules for the domain and its resolved IP, incorporate the indicator set into URL filtering and DNS sinkhole policies, and continue to monitor for any evolution of the site’s content or additional malicious associations.