home[.]patiobydesign[.]com

This domain, www.home.patiobydesign.com, operates as a credential-harvesting phishing site targeting users through fake taxi service pages. The site presents itself as Valo.taxi, displaying localized content such as नकद और सवारी (cash and ride) to appear legitimate. Analysis indicates the domain is designed to steal login credentials, payment details, or other sensitive information by tricking visitors into entering personal data on fraudulent forms or cloned interfaces. Infrastructure analysis reveals multiple high-confidence threat indicators. The domain was registered on September 24, 2014, through GoDaddy.com, LLC, yet maintains a Gridinsoft trust score of 0/100, signaling no credibility. It resolves to the IP address 185.149.120.183 and is flagged by 11 out of 95 security vendors on VirusTotal for malicious activity. Additionally, the domain appears on two security blocklists, including PhishDestroy and OISD, further confirming its fraudulent nature. The SSL certificate, issued by Let's Encrypt, does not mitigate the risk, as phishing sites commonly use valid certificates to appear trustworthy. If you visited www.home.patiobydesign.com or entered any information on the site, immediate action is required. First, disconnect the affected device from the network to prevent potential data exfiltration. Run a full system scan using updated security software to detect and remove any malware. Change passwords for all accounts accessed from the compromised device, prioritizing financial and email accounts, and enable multi-factor authentication where possible. Monitor bank statements and credit reports for unauthorized transactions. If payment details were entered, contact your financial institution to block or reverse fraudulent charges. Report the incident to relevant cybersecurity authorities or local law enforcement to aid in tracking the threat.