PhishStats flags phishing page hosted at 529motors.com/homepersonas/
PhishStats flagged a phishing page at 529motors.com/homepersonas/. The post does not say the business itself is a scam; this report concerns only that path.
- First reported
- Reports
- 1
Source: x.com · published
What happened
On 5 November 2026 the phishing tracker PhishStats posted on X a new phishing URL at 529motors.com/homepersonas/, resolving to 162.214.159.190 (Unified Layer, AS46606, United States). The post names only this URL and does not say what brand is targeted or whether the site is attacker-owned; 529motors.com may be a compromised or otherwise legitimate site hosting a phishing page rather than a scam business. This report concerns only the /homepersonas/ page. The domain also appears on the Phishing Army community blocklist.
How the scam works
Phishing pages are sometimes placed on compromised websites so that the address looks older or more trustworthy than a freshly registered scam domain. Visitors who follow a link may see a login or data-entry form that has nothing to do with the site's normal business. Entering credentials on that path can still hand them to criminals even if other parts of the same domain are legitimate.
Because PhishStats did not name the brand being mimicked, this report does not accuse 529motors.com of operating a scam. The practical advice is the same for any unexpected login path: do not enter passwords or one-time codes on a page reached from an unsolicited link, and open the real service by typing its address or using its official app. Anyone who entered details on /homepersonas/ should change those passwords and watch for account takeover. The URL and IP come from the PhishStats post and the blocklist listing, and have not been independently checked by scammers.com beyond those sources.
Source
Post by @PhishStats on X, 5 November 2026, flagging 529motors.com/homepersonas/. Not independently verified by scammers.com.
Red flags
- A phishing path such as /homepersonas/ on a domain that may otherwise be unrelated.
- A login or data form reached from an unsolicited link.
- No clear connection between the page and the domain's normal business.
- A request for passwords or one-time codes.
- Listing of the URL on a community phishing blocklist.
If you were targeted
- 1Do not enter credentials on 529motors.com/homepersonas/ or any unexpected path reached from a link.
- 2Open the real service by typing its address or using its official app.
- 3If you entered details, change passwords and watch for account misuse.
- 4Report the URL to the site owner and to a national phishing reporting service.
- 5Treat path-only phishing alerts as about the page, not necessarily the whole business.