hoscas[.]com

This domain, hoscas.com, is identified as a brand impersonation phishing site designed to deceive users by mimicking a legitimate foundation or charitable organization. The site presents itself under the title 'HOSCAS | Open the world of luck and rewards!', a lure likely intended to exploit trust in philanthropic or reward-based platforms. Analysis indicates the domain is engineered to harvest sensitive information, such as login credentials or financial details, under the guise of offering prizes or charitable contributions. The use of persuasive language and fabricated legitimacy suggests a targeted campaign aimed at individuals sympathetic to foundation-related causes, increasing the likelihood of successful social engineering attacks. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification of hoscas.com. The domain was registered on February 07, 2025, through Global Domain Group LLC, a registrar frequently associated with high-risk domains. It resolves to the IP address 104.21.48.1, a Cloudflare-associated address often leveraged to obfuscate hosting origins. VirusTotal reports that 2 out of 95 security vendors have flagged the domain as malicious, while it appears on at least one security blocklist. Additionally, the domain has been blocked by PhishDestroy, further corroborating its phishing classification. The Gridinsoft trust score of 0/100 underscores the domain's elevated risk profile, with no legitimate attributes detected during assessment. Users who visited hoscas.com or interacted with its content should take immediate remedial actions to mitigate potential compromise. Those who entered credentials or personal information are advised to reset passwords across all accounts where identical or similar credentials may have been reused. Financial institutions should be notified if payment details were provided, and credit monitoring services should be considered to detect fraudulent activity. Browser data, including cookies and cached files, should be cleared to eliminate residual tracking mechanisms. System scans using updated security tools are recommended to identify and remove any malware that may have been delivered through the phishing site. Organizations targeted by this campaign should implement additional verification steps for foundation-related communications to prevent further exploitation.