dev[.]gvyhjmetrics[.]garagedoorrepairofnaples[.]com

This domain is flagged as a fraudulent taxi payment portal impersonating legitimate ride-hailing services, specifically targeting users with Hindi-language payment prompts. The site presents itself as Valo.taxi, offering cash and ride options under the banner नकद और सवारी, a tactic designed to harvest payment details or login credentials from unsuspecting victims. Analysis indicates the site does not function as a legitimate taxi service but instead operates as a credential theft platform, likely collecting sensitive financial information under false pretenses. Infrastructure analysis reveals multiple high-risk indicators. The domain was registered on February 15, 2024, through GoDaddy.com, LLC, an unusually recent creation date for a purported commercial service. It resolves to the IP address 185.149.120.183 and is blocked by security vendors, with 17 out of 95 VirusTotal engines flagging it as malicious. The site employs Let's Encrypt SSL certification, a common tool among threat actors to mimic legitimacy, and utilizes technologies such as Node.js, Bootstrap, Vue.js, and Nuxt.js, which are frequently exploited in phishing campaigns. Additionally, the presence of HSTS and DDoS-Guard suggests an attempt to evade takedowns and detection. Users who visited this domain should take immediate action to mitigate potential risks. First, cease all interaction with the site and avoid entering any personal or financial information. If credentials were submitted, reset passwords for all associated accounts, particularly those linked to payment methods or ride-hailing services. Monitor financial statements for unauthorized transactions and enable multi-factor authentication where available. Given the domain's elevated risk level and offline status, it may reappear under a different name or IP; users are advised to verify the legitimacy of any taxi or payment service before engaging. Report the domain to local cybersecurity authorities or consumer protection agencies to aid in broader threat mitigation efforts.