hr24consulting[.]com

PhishDestroy identifies hr24consulting.com as a recently launched phishing domain designed to mimic a legitimate job-consulting portal. This fake site is part of an active campaign that harvests sensitive personal and financial information from unwitting job seekers. Attackers use spoofed company branding, fake job postings, and urgency tactics to trick victims into entering credentials or downloading malware disguised as application forms.

This domain was flagged for hosting a generic phishing operation. Key technical indicators include resolution to IP address 147.124.214.22, registration through OwnRegistrar, Inc., and creation on April 9, 2025. Alarmingly, VirusTotal currently shows zero detections across 95 antivirus engines, indicating that mainstream security tools have not yet blacklisted the site, leaving users exposed.

If you visited hr24consulting.com, stop entering any data immediately. Do not download files or click links from the site. Clear your browser cache and run a full system scan with updated antivirus software. Report the domain to your organization’s security team and submit a report via the FBI’s IC3 portal (www.ic3.gov) or your local cybercrime unit. Monitor financial accounts for unauthorized activity and change any reused passwords from other services.