kaidora[.]info

Kaidora.info is a phishing domain that takes advantage of political news to lure victims. The site, titled "MAXWIN5000 - President Prabowo Berkunjung Ke korban Meningal Demo Dpr 2025," was detected by PhishDestroy on February 26, 2026, just five days after its creation. Despite being taken down, it was flagged by one vendor on VirusTotal and listed on one public blocklist, indicating its malicious intent.

The domain was registered through NameCheap, Inc., and hosted on IP address 66.29.141.231 in the United States under AS22612. It used an SSL certificate issued by Sectigo Limited, which is common for phishing sites seeking to appear legitimate. The platform risk score for kaidora.info was assessed at 61 out of 100, suggesting a moderate threat level during its active period.

The quick detection of kaidora.info highlights the effectiveness of PhishDestroy's monitoring systems, which can identify threats in the crucial early window before they are widely recognized by antivirus vendors. This domain's use of current events as bait underscores the need for vigilance against phishing schemes that exploit timely and sensitive topics to deceive users.