nmd[.]lc

The domain nmd.lc was a phishing site engaged in brand impersonation targeting Apple users. It posed an elevated risk by mimicking Apple’s branding to deceive victims into disclosing login credentials or personal information. No crypto drainer kit was identified. The site is currently taken offline, reducing immediate exposure, but prior visitors may remain at risk of fraud or account compromise.

Technical analysis shows nmd.lc was flagged by 3 of 95 VirusTotal security vendors, including alphaMountain.ai, Gridinsoft, and SOCRadar. It appeared on 1 security blocklist (PhishDestroy) and was registered through Cloudflare, Inc. The domain resolved to IP address 172.67.164.45, hosted on Cloudflare’s US infrastructure (AS13335). No SSL certificate was present, and the page title observed was 'NMD Music • ONAPAGE LLC — Музыкальная Продакшн, Управление Артистами и Цифровой Лейбл'. AlienVault OTX recorded the domain in 1 threat intelligence pulse, while Gridinsoft assigned a trust score of 0/100. The HTTP status returned was 429, and nameservers were kurt.ns.cloudflare.com and mariah.ns.cloudflare.com.

Individuals who visited nmd.lc should immediately change any passwords entered on the site, particularly for Apple IDs or linked accounts. Enable two-factor authentication (2FA) on all critical services to prevent unauthorized access. Monitor financial statements and account activity for signs of fraud. Report the phishing domain to Apple via their official reporting channels and submit it to Google Safe Browsing, PhishTank, or other threat-sharing platforms to aid in broader mitigation efforts.