app[.]hcba[.]ltd

The domain app.hcba.ltd was identified as a phishing site, demonstrating a low VirusTotal score of 3 out of 95. This score indicates a high likelihood of malicious intent. The domain impersonated legitimate services, posing a risk to users. Furthermore, this domain has been blocklisted due to its illicit activities.

Registered under CC-198-23-141-200-29, the domain operated from an IP address of 198.23.141.202. The domain's age, alongside its blocklist status, suggests it was recently deployed for fraudulent purposes, likely exploiting user trust. Such domains often utilize shared hosting environments to facilitate their malicious endeavors.

The current status of app.hcba.ltd is inactive, as PhishDestroy has successfully reported and taken down the domain. Continuous monitoring is being conducted to ensure no resurgence of similar phishing attempts occurs under this or related domains.