mdg188[.]cc

This domain, mdg188.cc, is identified as a credential harvesting phishing site targeting users through deceptive login interfaces. Analysis indicates the site mimics legitimate platforms to capture sensitive authentication details, including usernames, passwords, and potentially multi-factor authentication codes. The page title, 'MDG 188 - Kode Presisi dengan Arah Terukur,' suggests a localized or themed approach to increase plausibility, likely aimed at specific user groups or regions. Infrastructure analysis reveals concrete indicators of malicious intent. The domain was registered on March 07, 2026, through NameCheap, Inc., an uncommon creation date that may indicate an attempt to evade temporal detection heuristics. It resolves to the IP address 188.114.97.3 and is currently flagged by 5 out of 95 security vendors on VirusTotal, including its presence on one security blocklist. The SSL certificate, issued by Google Trust Services, provides a veneer of legitimacy but does not mitigate the underlying threat. The domain has since been taken offline, though residual risk remains for users who may have interacted with it prior to deactivation. Users who visited mdg188.cc or entered credentials on the site should take immediate remedial action. All exposed passwords must be changed across any platforms where they were reused, prioritizing accounts with elevated privileges or financial access. Enable multi-factor authentication where available, using app-based or hardware tokens rather than SMS-based methods. Monitor linked accounts for unauthorized activity, including login attempts, transactions, or configuration changes. If the site was accessed in a corporate or institutional environment, report the incident to internal security teams for further investigation and potential containment measures.