callapp[.]us

This domain is identified as a credential theft phishing site designed to harvest user authentication details through fraudulent login portals. Analysis indicates the infrastructure is specifically engineered to mimic legitimate service interfaces, tricking victims into submitting sensitive credentials such as usernames, passwords, and potentially multi-factor authentication codes. The absence of SSL encryption further increases exposure risk, as all data transmitted to callapp.us would be sent in plaintext, vulnerable to interception during transit. Infrastructure analysis reveals multiple technical indicators confirming malicious intent. The domain was registered on January 14, 2026, through NameCheap, Inc., and resolves to IP address 139.59.122.128, hosted on DigitalOcean, LLC infrastructure in Singapore. VirusTotal detection shows 12 out of 95 security vendors flagging the domain as malicious, while it appears on three independent security blocklists. The site was actively blocked by multiple reputation-based security systems prior to being taken offline, indicating widespread recognition of its fraudulent nature. Users who accessed callapp.us should immediately revoke any credentials entered on the site, even if no submission was completed. Monitor all accounts associated with the affected email or username for unauthorized access attempts. Enable multi-factor authentication on all critical accounts using app-based or hardware tokens, avoiding SMS-based verification where possible. Review recent login activity across all platforms for unfamiliar locations or devices. If financial or identity data was exposed, consider placing a fraud alert with relevant credit monitoring agencies. Network administrators should add the domain and its associated IP to internal blocklists to prevent future access attempts.