Shared Certificate Serial Ties Four Lookalike Domains to One Brazil IP

Four freshly registered domains — zelpx.garden, carogra.biz, tzpx.courses, and fightwa.biz — resolve through the identical authoritative nameserver pair ns1.dyna-ns.net and ns2.dyna-ns.net, despite having been registered across two separate windows nearly three months apart. That single fact, verifiable directly against the WHOIS and DNS records, is the strongest thread running through this indicator set, and it is considerably more solid than anything the accompanying file collection offers.