A publicly listed victim claim around nundungopee.mu shows how ransomware crews use domain labels and ambiguity to pressure defenders before the technical facts are even clear.