microcarrental[.]com

The domain microcarrental.com has been identified as a brand impersonation threat specifically targeting the Near car rental brand. Currently, this domain has been taken offline, but it poses significant risks to users seeking car rental services in Pakistan. The page title, "Rent a Car in Islamabad, Rawalpindi and Lahore at Lowest Rate," was designed to lure victims into believing they were interacting with a legitimate Near-branded service, potentially leading to credential theft or financial fraud.

Technical indicators reveal that the domain was created on August 9, 2017, and registered through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to the IP address 207.174.214.183 and uses a Let's Encrypt SSL certificate (R13). Security scans show that 11 out of 95 VirusTotal vendors flagged this domain as malicious, and it appears on two security blocklists. Additionally, AlienVault OTX has documented this domain in 16 threat intelligence pulses, indicating widespread recognition of its malicious nature among the security community.

Although the domain is now offline, users who may have encountered it before takedown should remain vigilant. If you entered any personal or financial information on this site, change your passwords immediately and monitor your accounts for unauthorized activity. Always verify the legitimacy of car rental websites by checking official URLs and avoiding unsolicited links. For ongoing protection, use reputable security software and report any suspicious domains to threat intelligence platforms.