phpstack-1563878-6075646[.]cloudwaysapps[.]com

This domain is flagged as a generic phishing site designed to mimic a legitimate PHP hosting or development environment portal. Analysis indicates the site likely presented fake login pages, credential harvesting forms, or malware distribution under the guise of a "PHP Stack" service. The threat targets developers, system administrators, or users interacting with PHP-based platforms, aiming to steal sensitive information such as usernames, passwords, or API keys. Infrastructure analysis reveals the domain was registered through NameCheap, Inc. on January 4, 2012, though it was repurposed for malicious activity. It resolves to IP address 174.138.64.97 (AS14061, DigitalOcean, LLC) and was detected by 11 out of 95 security vendors on VirusTotal. The domain lacks an SSL certificate, increasing the risk of interception during data transmission. It appears on one security blocklist and was previously blocked by automated phishing detection systems. If you visited phpstack-1563878-6075646.cloudwaysapps.com or entered any credentials, immediately revoke and reset all passwords associated with the account. Scan the device used to access the site for malware, as phishing pages may deploy additional payloads. Enable multi-factor authentication on all critical accounts to mitigate unauthorized access. Monitor financial and digital assets for unusual activity, and report the incident to your organization’s security team or a trusted cybersecurity provider for further analysis.