test[.]handy-blitznews[.]professorflapjacks[.]com

The domain test.handy-blitznews.professorflapjacks.com is assessed as posing an elevated risk of credential theft. Analysis indicates that the domain is associated with a phishing campaign designed to trick users into revealing sensitive information such as login credentials and personal data.

Infrastructure analysis reveals that the domain has a Gridinsoft trust score of 0/100, indicating a complete lack of trust. VirusTotal flags the domain with 15 out of 95 security vendors identifying it as malicious. The domain is registered through Gandi SAS and was created on July 03, 2016. It resolves to the IP address 185.149.120.183 and appears on one security blocklist. The domain is currently offline and is blocked by PhishDestroy. Technological indicators show the use of Node.js, Bootstrap, Vue.js, Nuxt.js, HSTS, and DDoS-Guard, which are common in modern web applications and can be used to mask the true nature of the site.

To mitigate the risk of credential theft, users should avoid interacting with the domain and should immediately change passwords for any accounts that may have been compromised if they have visited the site. Additional steps include enabling multi-factor authentication (MFA) on all accounts, monitoring for unusual activity, and using a reputable password manager to ensure the use of unique and strong passwords. Network administrators should update their security policies to block access to the domain and educate users on the signs of phishing attacks.