xxyzt[.]my[.]id

This domain, xxyzt.my.id, was registered on 2026-02-26 and currently resolves to the IPv4 address 202.10.43.170, which is hosted by Rumahweb Indonesia under ASN 58487. The hosting provider is located in Indonesia. The site returns an HTTP response with the title “Index of /”, indicating a directory listing rather than a typical landing page. VirusTotal analysis shows that 13 of 93 security vendors have flagged the domain, demonstrating a moderate detection rate across reputable scanners.

The domain is listed on one external security blocklist and has been actively blocked by the PhishDestroy mitigation service. AlienVault OTX references the domain in a single threat‑intel pulse, further corroborating its malicious use. The SSL certificate associated with the domain carries an R13 rating, which is typical for low‑trust certificates often used by malicious actors. The service status is currently offline, suggesting that the phishing campaign has been taken down or is temporarily inactive.

Defenders should continue to enforce DNS‑level blocking for xxyzt.my.id and add the IP address 202.10.43.170 to any network‑wide deny lists. Existing URL filtering rules should be updated to include this domain, and security appliances should be configured to flag any future resolution to the same IP or ASN. Continuous monitoring of VirusTotal, OTX, and other threat‑intel feeds is recommended to detect any re‑registration or resurrection of the domain. Because the exact phishing payload and targeted brand have not been disclosed, organizations should treat any email or web request referencing this domain as potentially malicious and apply standard phishing mitigation controls, such as user education, MFA enforcement, and sandbox analysis of any downloaded artifacts.