n44yg[.]app[.]link

The domain n44yg.app.link has been assessed as having an elevated risk level and is confirmed to be a phishing site. This type of threat is designed to deceive users into revealing sensitive information, such as login credentials or financial data, which can then be exploited by malicious actors.

Analysis indicates that n44yg.app.link appears on one security blocklist and is blocked by the PhishDestroy platform. VirusTotal reports that 5 out of 95 security vendors flagged this domain as malicious. The domain is registered through Gandi SAS, a known registrar. Infrastructure analysis reveals that the domain uses Nginx, Amazon Web Services, OpenResty, HSTS, and Amazon CloudFront. The SSL certificate is issued by Amazon, which can sometimes be used to lend a false sense of legitimacy to the site. As of the latest assessment, the domain is currently offline, indicating that it may have been taken down or is no longer active.

To mitigate the risks associated with this phishing site, users are advised to avoid visiting the domain and to ensure that their browsers and security software are up to date. Organizations should configure their network security policies to block access to this domain and educate employees about the signs of phishing attacks. Additionally, monitoring for any unusual activity in user accounts and implementing multi-factor authentication can help prevent unauthorized access and protect sensitive information.