mampukah[.]petarung-supernova[.]com

This domain is flagged for hosting a QRIS (Quick Response Code Indonesian Standard) payment phishing scheme under the guise of instant deposit login services. The page title, ASD123 - Link Login Deposit Qris Instant Gampang Cuan 2026, explicitly references fraudulent financial transaction prompts, a common tactic in credential and payment data theft. Analysis indicates the site is designed to mimic legitimate banking or e-wallet login portals, likely harvesting user credentials and financial details for unauthorized transactions or identity fraud. Infrastructure analysis reveals the domain mampukah.petarung-supernova.com was registered on March 12, 2026, through Dynadot Inc, and currently resolves to the IP address 188.114.96.3. It employs Cloudflare services, including HTTP/3 protocol support, and uses a Let's Encrypt SSL certificate to present a false sense of security. The domain is detected by 5 out of 95 security vendors on VirusTotal and appears on one security blocklist. Despite its recent creation, the site has been actively blocked by at least one anti-phishing system, indicating confirmed malicious intent. Mitigation requires immediate action from network defenders and financial institutions. Security teams should block the domain and its resolving IP (188.114.96.3) at the DNS and firewall levels. Financial organizations should monitor for unauthorized transactions linked to credentials harvested from this site and issue alerts to customers about QRIS-based phishing threats. End users should be advised to verify payment requests through official channels, avoid clicking on unsolicited links, and report any suspicious login prompts to their financial service providers. Given the use of Cloudflare, takedown efforts may require coordination with the hosting provider and registrar to disrupt the phishing infrastructure.