dankurmidatalink[.]com[.]ng[.]onetargetdata[.]com[.]ng

The domain dankurmidatalink.com.ng.onetargetdata.com.ng is a credential-phishing site engaged in brand impersonation targeting Apple users. It presents itself as a legitimate service but is designed to harvest login credentials through deceptive pages. No crypto drainer kit was identified. The site is currently taken offline, though it previously posed an elevated risk due to its fraudulent activity.

Technical analysis shows dankurmidatalink.com.ng.onetargetdata.com.ng was detected by 1 of 95 VirusTotal security vendors, including SOCRadar. It appears on 1 security blocklist (PhishDestroy) and was registered through registrar CC-192-3-190-184-29 (ASN: 36352). The domain resolves to IP address 192.3.190.186, hosted in the US under AS36352 (HostPapa). No SSL certificate was observed, and the page title displayed 'DANKURMI DATA LINK | A technology platform that offers solutions to digital needs at best possible price without compromising quality.' The HTTP status returned was 429, and no nameservers were found.

Users who interacted with dankurmidatalink.com.ng.onetargetdata.com.ng should immediately change their Apple ID passwords and enable two-factor authentication (2FA) to prevent unauthorized access. Monitor accounts for suspicious activity, such as unauthorized purchases or login attempts. Report the phishing domain to Apple via their official reporting channels and to platforms like Google Safe Browsing or PhishTank to aid in broader takedown efforts.