id-work[.]com[.]id-inform[.]com

The domain id-work.com.id-inform.com is a generic phishing site designed to deceive users into disclosing sensitive information. It does not impersonate a specific brand or employ a known drainer kit. As of the latest verification, the site has been taken offline, but it previously posed an elevated risk of credential theft or other fraudulent activity.

Technical analysis shows that id-work.com.id-inform.com was flagged by 14 of 95 security vendors on VirusTotal, including BitDefender, CRDF, and CyRadar. The domain was created on 2026-02-21 07:01:08 and resolved to the IP address 198.12.80.250, hosted on AS36352 (HostPapa) in the US. It appeared on one security blocklist, PhishDestroy, and used an SSL certificate issued by R11. Google Safe Browsing did not flag the domain at the time of assessment.

Users who may have interacted with id-work.com.id-inform.com should immediately change any exposed passwords and enable two-factor authentication (2FA) on affected accounts. Monitor accounts for unauthorized activity and report the phishing domain to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. If financial or cryptocurrency credentials were entered, consider revoking token approvals and transferring funds to a new wallet as a precaution.