ikumiyoshimatsu[.]com

The domain ikumiyoshimatsu.com has been identified as a brand impersonation threat specifically targeting eBay. Currently, the domain is offline, but during its active period it posed a significant risk to users by mimicking eBay's login interface to steal credentials. The page title found was "Hebat33 : ThinkPositive30 Rancang Pola Terbaik Bernapas Optimisme Pemicu Maxwin Brutal Di Hebat33 Situs," which appears unrelated to eBay but was likely used to deceive search engines or evade detection.

Technical analysis reveals that this domain was flagged by 11 out of 95 security vendors on VirusTotal, indicating a high level of malicious consensus. It is also listed on one security blocklist and appears in one AlienVault OTX threat intelligence pulse. The domain was registered through GoDaddy.com, LLC and has an SSL certificate issued by GoDaddy Secure Certificate Authority. It resolves to IP address 172.67.143.198. Interestingly, the domain was created on December 15, 2012, which is unusually old for a phishing domain, suggesting it may have been repurposed for malicious activity. The risk level is elevated due to the combination of brand impersonation and moderate vendor flags.

Given that the domain has been taken offline, the immediate threat is neutralized. However, users should remain vigilant as similar domains may appear. PhishDestroy recommends that anyone who may have interacted with ikumiyoshimatsu.com change their eBay passwords immediately and enable two-factor authentication. Always verify URLs before entering credentials, and use PhishDestroy's database to check for known phishing sites. If you encounter suspicious emails or links, report them to protect others from falling victim to such impersonation attacks.