app-nosana[.]xyz

The domain app-nosana.xyz was registered on 2026-04-29 through Dynadot LLC. DNS resolution points to the Cloudflare‑owned address 172.67.133.128, served by the nameservers blair.ns.cloudflare.com and keanu.ns.cloudflare.com. The site presents a TLS certificate issued by Let’s Encrypt (E7) and returns an HTTP 403 status code, with the page title “Just a moment…”. VirusTotal records five positive detections out of ninety‑one scanners, and AlienVault OTX lists the domain in a single threat pulse. The domain appears on one public blocklist, has been flagged by PhishDestroy, and receives a Gridinsoft trust score of zero out of one hundred. The risk rating is high and the domain remains active. No additional content analysis is available, so the exact phishing payload or targeted brand cannot be confirmed. Defenders should add the domain and its resolving IP to perimeter blocklists, enforce DNS‑based filtering, and monitor for any related C2 traffic. Continuous re‑assessment is advised, given the active status and the modest but non‑trivial detection rate on VirusTotal.