ingatkami[.]pages[.]dev

This domain, ingatkami.pages.dev, is under investigation for credential harvesting phishing activity targeting users through deceptive financial-themed lures. The site presents itself with the page title 'Kena Petir Jadi Tajir,' a phrase commonly associated with fraudulent investment or money-making schemes designed to trick victims into entering sensitive login credentials, payment details, or personal information. Such tactics often exploit psychological triggers, including promises of quick wealth, to lower user vigilance and increase the likelihood of successful compromise. Analysis indicates the domain was registered on June 30, 2025, through Cloudflare, Inc., and currently resolves to the IP address 172.66.47.12, part of AS13335 operated by the same provider. Despite its recent creation, the domain has not yet been flagged by antivirus engines, with a detection score of 0/95 on VirusTotal. However, it appears on one security blocklist and is served via a Google Trust Services SSL certificate (WE1), which may lend an appearance of legitimacy to unsuspecting users. The use of Cloudflare infrastructure is consistent with phishing campaigns seeking to obscure origin servers and evade takedown efforts. Users who have visited ingatkami.pages.dev or interacted with its content should take immediate remedial action. If credentials were entered, reset passwords for all associated accounts, particularly those linked to financial services or email. Enable multi-factor authentication where available to mitigate unauthorized access. Monitor accounts for suspicious activity, including unauthorized transactions or login attempts. Consider scanning the device used to access the site for malware, as some phishing pages may deliver secondary payloads. Report the domain to local cybersecurity authorities or incident response teams to support broader mitigation efforts.