app[.]admin[.]kafka-ui[.]conferenciadehumanizacao[.]com

The domain app.admin.kafka-ui.conferenciadehumanizacao.com is identified as a generic phishing infrastructure designed to impersonate legitimate financial service providers. Analysis of the page title, 'Appreciating Atelier Orange: Excellence in Finance Solutions,' suggests an attempt to deceive users into believing the site is associated with a trusted finance entity, likely targeting credentials or sensitive financial data. The domain is currently offline, but prior activity indicates active malicious use. Infrastructure analysis reveals the domain was registered through Domain.com - Network Solutions, LLC on May 15, 2022, and resolves to the IP address 185.149.120.183. Security vendor assessments show 17 of 95 engines on VirusTotal flagged the domain as malicious, while Gridinsoft assigned a trust score of 0 out of 100. The domain appears on one security blocklist and was previously blocked by PhishDestroy. Technical indicators include the use of Let's Encrypt SSL certificates and backend technologies such as Node.js, Bootstrap, Vue.js, Nuxt.js, HSTS, and DDoS-Guard, which may be leveraged to enhance the site's appearance of legitimacy or to evade detection. The domain is currently offline, reducing immediate risk to users. However, the infrastructure may be reactivated or repurposed for future campaigns. Organizations and individuals are advised to block the domain and its associated IP address (185.149.120.183) at the network level. Users who may have interacted with the domain should reset credentials for any accounts accessed during the potential exposure window and monitor financial statements for unauthorized activity. Security teams should review logs for connections to the domain or IP to identify compromised endpoints.