app-grassfoundation[.]com

PhishDestroy identifies app-grassfoundation.com as a high-risk fake charity donation scam designed to harvest credit card details and personal information from well-intentioned donors. The domain impersonates legitimate grassroots foundations by using similar branding and urgent donation appeals, tricking users into entering payment credentials on fraudulent donation forms. This specific threat targets individuals looking to support charitable causes, exploiting their trust and generosity to commit financial fraud. This domain was flagged by only 1 out of 95 security vendors on VirusTotal, indicating low detection rates and suggesting the scam is relatively new or sophisticated. It is registered through NICENIC INTERNATIONAL GROUP CO., LIMITED, a registrar frequently associated with malicious domains, and resolves to the IP address 188.114.96.3. The SSL certificate, issued by Google Trust Services (WE1), provides a false sense of security, as encrypted connections do not guarantee legitimacy. No additional blocklist data is currently available, but the domain’s recent creation and lack of widespread detection highlight its deceptive nature. Users who visited app-grassfoundation.com should immediately cease all interactions and avoid entering any personal or financial information. If credentials or payment details were already submitted, affected individuals should contact their bank or credit card provider to report potential fraud and request a card replacement. Run a full antivirus scan on any device used to access the site to check for malware or keyloggers. Additionally, monitor financial statements for unauthorized transactions and consider placing a fraud alert with credit bureaus. Report the domain to the Federal Trade Commission (FTC) or your local cybercrime authority to help prevent further victims.