lad83[.]top

Analysis of lad83.top indicates that the domain was registered on October 18, 2025 through NiceNIC International Group Co., Limited and subsequently taken offline. The domain resolves to the IP address 188.114.97.3, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. Nameserver queries return george.ns.cloudflare.com and lindsey.ns.cloudflare.com, confirming the use of Cloudflare’s DNS services. No TLS certificate is presented, suggesting the site does not support HTTPS.

Gridinsoft assigns a trust score of 0 out of 100, reflecting a complete lack of confidence in the domain’s legitimacy. The domain appears on two independent security blocklists and is actively blocked by PhishDestroy and ScamSniffer, reinforcing the assessment of malicious intent. VirusTotal scans show that five of ninety‑five antivirus engines flagged the domain, providing additional corroboration of its suspicious nature.

While the exact content of the site, including page titles or target brands, has not been disclosed, the infrastructure footprint aligns with typical phishing operations that leverage Cloudflare’s CDN to hide origin servers and benefit from rapid deployment. Defenders should continue to block lad83.top at network perimeter and DNS layers, monitor for any re‑activation attempts, and include the associated IP address in threat‑intel feeds. Ongoing vigilance is advised, especially if the domain reappears in URL‑based filters or is observed in user‑generated traffic.