bscpad-app[.]world

Analysis of bscpad-app.world shows a single-page site returning the title “Welcome to CentOS”. The domain resolves to the IPv6 address 2606:4700:3031::6815:1b56, which belongs to Cloudflare (AS13335) and is geolocated in the United States. No SSL certificate is presented, indicating HTTP‑only access. The registration is listed under ARIN, but no further registrant details are provided.

Reputation checks are uniformly negative: Gridinsoft assigns a trust score of 0 / 100, Scamadviser rates the domain 36 / 100, and two independent blocklists (PhishDestroy and ScamSniffer) have already listed the domain. It also appears on two additional security blocklists. A VirusTotal scan involving 95 antivirus engines returned no detections at the time of the query, but the absence of detections does not imply legitimacy. The site is currently taken offline, which limits immediate threat exposure, yet the infrastructure—Cloudflare front‑end, lack of TLS, and low trust scores—matches patterns observed in generic phishing campaigns.

Defenders should continue to block the domain at perimeter filters, add the associated IPv6 address to deny lists, and monitor for any re‑activation or similar domains registered with the same name pattern. Because the underlying content has not been examined, the exact phishing payload remains unknown; further sandbox or manual review would be required if the site resurfaces. Ongoing vigilance is recommended, especially for any traffic attempting to load “Welcome to CentOS” pages from this host.