mds-m[.]com

The domain mds-m.com was set up to impersonate the staffing and consulting brand Modis, tricking visitors into believing they were on a legitimate corporate site. This is a classic brand impersonation phishing scheme, designed to harvest login credentials, personal information, or even payment details from unsuspecting job seekers or business partners. The site posed as "Modis M" and likely attempted to collect sensitive data through fake login forms or contact pages.

PhishDestroy identified this threat through multiple indicators. The domain was created on April 20, 2026, through GoDaddy.com, LLC, a common registrar for both legitimate and malicious sites. VirusTotal flagged it with 3 out of 95 security vendors marking it as malicious, and it appeared on one security blocklist. The site resolved to IP address 82.112.241.101 and used a Let's Encrypt SSL certificate (issued to E7), which gave it a false sense of security. Fortunately, the domain has since been taken offline, but the infrastructure could be reused.

If you visited mds-m.com and entered any information, change your passwords immediately—especially if you reused credentials. Monitor your accounts for unusual activity and consider enabling two-factor authentication. If you provided financial details, contact your bank or credit card provider. Stay vigilant: always verify the URL before entering sensitive data, and remember that brand impersonation sites often use slightly misspelled domain names or lookalike designs.