kim-distribution[.]cm

This domain, kim-distribution.cm, is currently flagged as an active fake marketplace phishing site targeting users under the guise of a Cameroonian e-commerce platform. Analysis indicates the site impersonates a legitimate marketplace, likely aiming to harvest user credentials, payment details, or deploy malware under the pretense of commercial transactions. The domain remains operational and poses a high risk to unsuspecting visitors seeking local online shopping services. Infrastructure analysis reveals multiple technical indicators supporting its malicious classification. The domain was registered on May 24, 2026, through CAMOO SARL, a registrar with historical associations to fraudulent domains. It resolves to the IP address 109.234.167.86, which has been linked to previous phishing campaigns. Security vendors on VirusTotal have flagged the domain, with 12 out of 95 engines detecting malicious activity. Additionally, the domain appears on three security blocklists, including those maintained by enterprise threat intelligence platforms. The SSL certificate, issued by Let's Encrypt (R12), is valid but does not mitigate the underlying threat, as fraudulent sites commonly leverage free certificates to appear legitimate. Current status confirms the domain remains active, with no takedown or mitigation measures observed as of this assessment. Users are strongly advised to avoid interaction with kim-distribution.cm, including entering credentials, downloading files, or completing transactions. Organizations should update web filters to block the domain and its associated IP address. Individuals who may have engaged with the site should immediately reset passwords, monitor financial statements for unauthorized activity, and conduct a malware scan on any devices used to access the domain. Given the high detection rate and blocklist presence, this domain should be treated as a confirmed threat vector requiring immediate containment.