dukungjobsumkmmitra[.]com

This domain is flagged as an elevated-risk credential theft operation targeting users through deceptive login portals. Analysis indicates it is designed to harvest usernames, passwords, and other sensitive authentication details under the guise of a legitimate service, likely impersonating small business or government support programs given the naming convention. Infrastructure analysis reveals the domain was registered on February 21, 2026, through Gname.com Pte. Ltd., an offshore registrar frequently associated with high-risk domains. It resolves to IP address 172.67.171.52, hosted on Cloudflare’s network (AS13335), which is commonly exploited to mask malicious infrastructure. The SSL certificate is classified as WE1, a low-trust category often linked to automated or bulk-issued certificates. Security vendors on VirusTotal detect the domain at 18/95, with detections spanning credential theft, phishing, and deceptive content. The domain appears on one security blocklist, and its current status is offline, though this does not eliminate residual risk from cached or cloned versions. Users who may have interacted with this domain should immediately reset credentials for any accounts entered on the site, particularly if reused across platforms. Enable multi-factor authentication (MFA) on all critical accounts to mitigate unauthorized access. Organizations should block the domain and associated IP at the network level and monitor for signs of credential stuffing or lateral movement. Given the domain’s recent creation and Cloudflare hosting, assume any login prompts from this domain were fraudulent and report the incident to relevant cybersecurity authorities for further tracking.