m[.]csam[.]in

PhishDestroy has identified m.csam.in as an active phishing domain that impersonates a task management platform, likely targeting users of popular project management tools. The page, titled "Home — Task," presents a fake login interface designed to steal credentials. This threat is classified as generic phishing, but its specific impersonation of a task management service increases its effectiveness, as victims may believe they are logging into a legitimate work-related application.

Technical analysis reveals that m.csam.in was created on May 16, 2026, and is registered through HOSTINGER operations, UAB, a provider often abused by malicious actors. The domain resolves to IP 104.21.82.169 and uses an SSL certificate issued by SSL Corporation via Cloudflare TLS Issuing ECC CA 4, which may lend a false sense of security. VirusTotal data shows that 6 out of 95 security vendors flag this domain, and it appears on at least one security blocklist. These indicators confirm the domain's malicious nature and its active status.

Users who have visited m.csam.in or entered credentials should immediately change their passwords for any accounts used on the site and enable two-factor authentication where possible. It is also advisable to monitor accounts for unauthorized activity and report the incident to IT security teams. PhishDestroy recommends verifying all login pages directly through official URLs and avoiding links from unsolicited messages. For further protection, users can check suspicious domains on PhishDestroy's platform.