aizhara[.]apsny[.]land

This investigation documents aizhara.apsny.land, which is currently active and classified as a generic phishing infrastructure. DNS resolution points the domain to the IPv4 address 91.238.3.25, and authoritative name servers are ns1.apsdns.su and ns2.apsdns.su, both hosted under the .su TLD. The domain is listed by Google Safe Browsing with a SOCIAL_ENGINEERING flag, indicating that the URL has been reported or detected as delivering deceptive content intended to harvest credentials or personal information. No publicly available page metadata, such as title or brand targeting, has been disclosed, and the site has not been shared for analysis, leaving the exact payload or lure unknown. Consequently, threat actors may be using the domain to host credential‑stealing pages or to redirect victims to other malicious hosts. Defenders should consider adding the domain and its resolved IP address to blocklists at network and endpoint layers, monitor DNS queries for the associated .su name servers, and enable real‑time URL filtering that references Google Safe Browsing and similar reputation services. Ongoing observation of the IP and any future content disclosures is recommended to refine detection rules.