ndz-01[.]nodzhostinger[.]com[.]br

PhishDestroy has identified ndz-01.nodzhostinger.com.br as a confirmed generic phishing domain that is currently offline. This domain was actively used to impersonate legitimate services and steal user credentials. Its registration through UMBLER and reliance on a Let's Encrypt SSL certificate are common hallmarks of malicious operations.

The domain resolves to IP address 152.53.247.197 and was created on April 19, 2026. VirusTotal analysis shows 19 out of 95 security vendors flagged this domain as malicious, and it appears on 1 security blocklist. These indicators, combined with its use of a free SSL certificate and registrar often abused by threat actors, confirm its hostile intent.

Although the domain is now offline, users who have previously interacted with it should change any credentials entered and monitor accounts for suspicious activity. PhishDestroy recommends blocking the domain and associated IP at the network perimeter and reporting the incident to relevant security teams. Continued vigilance is advised as similar domains may appear under different subdomains or TLDs.