kerjadarirumah[.]com

The domain kerjadarirumah.com was registered on December 12, 2025 through Gname.com Pte. Ltd. and is currently listed as offline. DNS resolution points to the IP address 172.67.200.205, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. The authoritative nameservers are morgan.ns.cloudflare.com and reza.ns.cloudflare.com, indicating the use of Cloudflare’s DNS infrastructure. No SSL/TLS certificate was observed for the host, meaning HTTPS connections would be unsigned or unavailable. The HTTP response, when captured before takedown, returned a page title of "Shopee," a mismatch to the declared impersonation target of the backpack brand.

This incongruity suggests that the site may have been repurposed or that the page title was not updated to reflect the phishing lure. Detection services have flagged the domain: VirusTotal recorded 15 positive detections out of 93 security vendors, and the domain appears on at least one public blocklist. PhishDestroy has explicitly blocked the domain, and AlienVault OTX references it in two separate threat‑intel pulses, reinforcing its association with malicious activity. Gridinsoft assigned a trust score of 0 out of 100, indicating a lack of confidence in the domain’s legitimacy. Given the evidence, the infrastructure exhibits typical characteristics of a brand‑impersonation campaign: recent registration, use of a reputable CDN to obscure hosting, absence of TLS, and multiple vendor detections.

However, the current offline status limits immediate observation of payloads or credential‑harvesting pages, and the exact content served prior to takedown remains unverified. Defenders should continue to block the domain at network borders, monitor the associated IP address for any resurgence of malicious activity, and update URL filtering rules to include kerjadarirumah.com.