kirimdulu2[.]com

PhishDestroy identifies kirimdulu2.com as a live fake giveaway scam actively targeting users with deceptive prize claims. The domain leverages urgency and social engineering to trick victims into submitting personal or payment details under the guise of claiming non-existent rewards. No direct brand impersonation was detected in initial analysis, but the site mimics generic ‘gift’ or ‘promo’ landing pages commonly associated with drainer kit campaigns. The infrastructure appears designed for rapid deployment and evasion, with minimal footprint to avoid early detection. This domain was flagged with a confirmed threat type of generic phishing and is currently under active investigation. Key technical indicators include: VirusTotal detection score of 1/95, domain registered via Name.com, Inc., resolving to IP 172.67.206.227, created on July 21, 2025, and secured with a Google Trust Services SSL certificate. The domain is not currently flagged in Google Safe Browsing (GSB), and no public blocklist entries are recorded as of this assessment. As of today, kirimdulu2.com remains active and accessible. No takedown or remediation actions have been confirmed. While current detection rates are low, the site’s fresh registration and clean infrastructure suggest high potential for escalation in malicious activity. Users are strongly advised to avoid interaction, report the domain to security teams, and rely on real-time threat intelligence feeds for updated status. The residual risk remains elevated due to active hosting and minimal detection coverage.