picsartpremium[.]com[.]in

This domain, picsartpremium.com.in, is actively flagged as a high-risk phishing site targeting users seeking modified Android applications. Registered on June 8, 2026, through Dynadot, LLC, the domain resolves to IP 188.114.97.3 and is hosted behind Cloudflare, utilizing HTTP/3 and WordPress with MySQL and PHP. The page title explicitly advertises 'PicsArt MOD APK v29.9.7 Download [Premium Unlocked] 2025,' indicating an attempt to distribute unauthorized or malicious APK files under the guise of a premium-unlocked version of a legitimate application. Analysis indicates the domain appears on three security blocklists and has been referenced in 16 threat intelligence pulses on AlienVault OTX. Eleven of 95 security vendors on VirusTotal flag the domain as malicious. It is currently blocked by SEAL, MetaMask, and PhishDestroy, and holds a Gridinsoft trust score of 0/100. The SSL certificate is issued by Google Trust Services, which does not inherently validate the site's legitimacy. Defenders should treat this domain as a confirmed phishing threat. The infrastructure suggests a deliberate attempt to evade detection through Cloudflare and modern web technologies, while the advertised content aligns with known tactics for distributing malware or credential-stealing payloads via modified APKs. No evidence of a legitimate association with the official PicsArt application or brand is present. Immediate blocking at the DNS or proxy level is recommended, along with monitoring for related file downloads or connections to the resolving IP. Further investigation into the APK file itself is advised if encountered in network logs or endpoint telemetry.