app[.]home-para[.]cc

PhishDestroy identifies app.home-para.cc as a credential-harvesting phishing threat currently in active operation. This domain presents itself as a legitimate page titled “www.app.home-para.cc,” but it is engineered to trick users into surrendering login credentials to impersonated services. PhishDestroy’s investigation confirms the site was registered on December 07, 2023 through NICENIC INTERNATIONAL GROUP CO., LIMITED, resolving to IP 104.21.30.167 and secured by a Google Trust Services SSL certificate. VirusTotal analysis shows 0 detections out of 95 participating anti-virus vendors, indicating this page remains under the radar despite its malicious intent. Because the domain is both newly created and minimally flagged, users face elevated risk of exposure to unmitigated credential theft. Current status remains active with no visible takedown actions recorded. Exact indicators include creation date December 07 2023, registrar NICENIC INTERNATIONAL GROUP CO., LIMITED, hosting IP 104.21.30.167, 0 VirusTotal detections from 95 scanners, and a positive SSL trust score via Google Trust Services. These factors combine to produce a HIGH risk profile for unsuspecting visitors, especially those expecting genuine service logins. PhishDestroy advises immediate blocking of app.home-para.cc at network and endpoint levels. Users who may have already submitted credentials should rotate passwords immediately and enable multi-factor authentication on all linked accounts. Organizations are recommended to deploy DNS sinkholing and web-content filtering rules referencing IP 104.21.30.167 and domain app.home-para.cc to pre-empt further exploitation. Continuous monitoring of newly registered domains under NICENIC registrations is strongly suggested to reduce exposure windows.