alhasanah[.]or[.]id

Analysis of alhasanah.or.id indicates that the domain was created on September 19, 2014 and is currently registered through PT Digital Registra Indonesia. The authoritative name servers are ns1.niagahoster.com and ns2.niagahoster.com, and DNS resolution points to the IPv4 address 194.163.42.119. The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, confirming that at least one defensive feed has identified it as malicious.

VirusTotal records show that one out of ninety‑one scanning engines has flagged the domain, providing a minimal but concrete indication of suspicious activity. The overall status is listed as active, meaning the domain continues to resolve and can be accessed by clients that do not enforce blocklist filtering. No additional public intelligence such as Safe Browsing entries, Open Threat Exchange references, SSL certificate details, HTTP response codes, or page title information is available in the current data set, leaving the exact nature of the hosted content unverified.

Defenders should treat alhasanah.or.id as a high‑risk indicator. Recommended mitigations include adding the domain to local and network‑level blocklists, monitoring DNS queries for outbound resolution attempts, and configuring proxy or firewall policies to deny traffic to the resolved IP address 194.163.42.119. Continuous re‑evaluation is advised, as further scanning by additional vendors or updates to blocklist feeds could increase the detection count and provide more context about the threat actor's infrastructure.