vdeyco[.]my[.]id

The domain vdeyco.my.id was registered on February 21, 2026 through PT Digital Registra Indonesia. DNS resolution points to the IPv4 address 202.10.43.74, which belongs to AS58487 operated by Rumahweb Indonesia. The hosting environment reports LiteSpeed web server, WordPress content management, MySQL database, PHP runtime, Google Analytics tracking, and HTTP/3 support. An SSL certificate issued by Let’s Encrypt (R13) secures the site, but the only observable page title returned by the server is "» Page not found", indicating that the primary landing page is either removed or deliberately hidden.

VirusTotal analysis shows that one of ninety‑three scanning engines flagged the domain, and the domain appears on a security blocklist that is also enforced by PhishDestroy. Gridinsoft assigns a trust score of 43 out of 100, and the domain is currently taken offline. Nameservers are NS1.RUMAHWEB.COM, NS2.RUMAHWEB.COM, NS3.RUMAHWEB.NET, and NS4.RUMAHWEB.NET. The evidence points to a generic phishing infrastructure that likely attempts credential harvesting, though the exact payload or targeted brand has not been captured.

Uncertainty remains regarding the specific phishing page content, the lure used, and whether additional sub‑domains are active. Defenders should continue to block the IP address 202.10.43.74, add vdeyco.my.id to DNS‑based deny lists, monitor the Rumahweb name‑server range for similar registrations, and enforce safe‑browsing warnings for any user‑initiated navigation to the domain. Ongoing reconnaissance is recommended to detect any re‑hosting attempts or related indicators of compromise.