# app-hackmd.com — SUSPICIOUS

> PhishDestroy flags app-hackmd.com as a credential theft scam with 0/95 VirusTotal detections. Visit at your own risk — avoid entering any login details.

## Summary
PhishDestroy identifies app-hackmd.com as a credential theft scam mimicking the legitimate HackMD platform. This fraudulent site aims to trick developers into submitting their login credentials by presenting a near-identical interface to the real HackMD service. Once harvested, these stolen credentials could be used to access sensitive documents, compromise accounts, or launch follow-on attacks against users and their organizations. Given the domain's recent creation and lack of detection by security tools, extra caution is strongly advised when encountering links or advertisements promoting this site.

This domain was flagged with a credential theft threat type based on multiple technical indicators. It was registered through Hello Internet Corp on March 15, 2026, and resolved to IP address 104.21.67.19. VirusTotal currently shows 0 detections out of 95 scans, indicating that most antivirus and browser-based security tools have not yet recognized its malicious nature. The domain's very recent registration, combined with its use of a Let's Encrypt SSL certificate, suggests an attempt to appear legitimate while actively harvesting credentials.

If you visited app-hackmd.com, immediately check for unauthorized login attempts or suspicious activity in your email, cloud storage, or developer accounts. Do not enter any passwords, API keys, or sensitive information on this site. If you entered credentials, change them immediately on the official HackMD platform and enable two-factor authentication. Report the domain to your IT team or security provider and consider running a malware scan on your device. Avoid clicking any links from this domain and warn others who may have received similar messages.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registered: 2026-03-15 19:07:28
- Registrar: Hello Internet Corp
- IP: 104.21.67.19

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/091b4e6d-086c-48a2-b344-198233ac8473
- PhishDestroy: https://phishdestroy.io/domain/app-hackmd.com/
- LLM endpoint: https://phishdestroy.io/domain/app-hackmd.com/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/app-hackmd.com/
Last updated: 2026-03-23