dds[.]drrenukakumar[.]com

Analysis indicates that dds.drrenukakumar.com was registered on May 05 2026 through Network Solutions, LLC and is currently active. The domain resolves to the Cloudflare‑owned address 188.114.96.3, which is associated with a Canadian location. DNS resolution uses the Cloudflare name servers keira.ns.cloudflare.com and marek.ns.cloudflare.com. TLS is provided by a Let’s Encrypt certificate (issuer E7) and the site returns an HTTP 403 status code, suggesting that the front‑end content is being deliberately hidden or restricted. The domain appears on a single public blocklist and is listed by PhishDestroy, while a Gridinsoft trust score of 0 / 100 reflects a maximal lack of confidence.

The hosted page advertises “SLOT MAHJONG WAYS 2 : Link Situs Slot Gacor Mahjong Ways 2 Di Indonesia”, a typical gambling‑related lure aimed at Indonesian users. This language matches the generic_phishing classification and aligns with the high risk rating assigned to the domain. VirusTotal analysis shows that three of ninety‑five scanning engines flagged the domain, providing independent confirmation of malicious intent. The combination of a newly created domain, Cloudflare fronting, a valid TLS certificate, and a blocked HTTP response is a common pattern for credential‑stealing or ad‑fraud campaigns that rely on social engineering.

Defenders should block DNS resolution for dds.drrenukakumar.com at the network perimeter and add the address 188.114.96.3 to IP block lists. Email gateways should treat any links to this domain as malicious and quarantine related messages. Incident response teams should monitor logs for HTTP 403 responses to this host and investigate any authentication attempts that may have been redirected through the site. Continuous threat‑intel feeds should be consulted for additional indicators that may emerge as the campaign evolves.