cumdates.com used for high‑risk generic phishing campaign

Analysis of the domain cumdates.com indicates that it is actively being leveraged in a generic phishing operation classified as high risk. The domain is registered through InterNetX GmbH, and its DNS resolution is hosted on Cloudflare secondary name servers ns0107.secondary.cloudflare.com and ns0137.secondary.cloudflare.com. HTTP requests to the site return a 301 redirect, suggesting an attempt to forward victims to a malicious endpoint.

Threat intelligence sources show that the domain is listed on one security blocklist and has been blocked by the PhishDestroy service, confirming its presence on known anti‑phishing feeds. VirusTotal reports three detections out of ninety‑one scanned security vendors, providing limited but concrete evidence of malicious activity. No additional infrastructure details such as IP address, autonomous system number, or geographic location are available from the current data set, and SSL certificate information is not disclosed.

The page title and any content‑specific indicators have not been publicly released, leaving the exact phishing lure undefined. Defenders should continue to monitor cumdates.com across DNS, URL filtering, and endpoint protection solutions, enforce blocklist entries for the domain, and consider it a high‑severity indicator when observed in network traffic. Incident responders are advised to isolate any connections to the domain, collect associated logs, and apply remediation steps consistent with phishing response playbooks.