indihouse[.]su

This domain, indihouse.su, is identified as a credential harvesting phishing infrastructure designed to bypass security controls through antibot mechanisms. The page title 'Indi antibot' suggests deliberate evasion techniques to avoid automated detection systems, increasing the risk of successful credential theft from unsuspecting users. The domain targets individuals by mimicking legitimate login portals, likely capturing usernames, passwords, and other sensitive authentication details for subsequent malicious use. Analysis indicates indihouse.su has been flagged by 5 out of 95 security vendors on VirusTotal, demonstrating moderate consensus on its malicious nature. The domain is registered through REGRU-SU and currently resolves to the IP address 104.21.31.68, which is associated with DDoS-Guard protection services. It appears on one security blocklist and has been included in two threat intelligence pulses, further corroborating its role in phishing operations. The SSL certificate is issued by Google Trust Services, which may lend a false sense of legitimacy to potential victims. Users who have visited indihouse.su or entered credentials on this domain should immediately reset passwords for any accounts accessed through the site. Enable multi-factor authentication where available to mitigate unauthorized access. Monitor financial and communication accounts for signs of compromise, such as unauthorized transactions or suspicious messages. Network administrators should block the domain and its resolving IP (104.21.31.68) at the perimeter to prevent further exposure. If browser sessions were active during the visit, clear all cached data and cookies to eliminate residual tracking mechanisms.