aktiifkanpaylateryy[.]fezu[.]my[.]id

The domain aktiifkanpaylateryy.fezu.my.id is currently flagged as a high‑risk generic phishing site. Analysis shows that the domain resolves to the IP address 188.114.96.3, which is listed on at least one public security blocklist and is actively blocked by the PhishDestroy feed. VirusTotal has recorded 14 positive detections out of 91 scanned vendors, confirming that multiple security engines consider the host malicious. The domain appears on a single blocklist, reinforcing its reputation as a threat.

No nameserver records were returned during DNS queries, indicating that the authoritative name service data is either hidden or not published. The site’s HTTP response, TLS certificate, page title, and any brand‑specific content have not been captured, so the exact phishing lure remains unverified. The available intelligence therefore consists of network‑level indicators (IP address, blocklist status) and vendor detections. Defenders should add 188.114.96.3 to network‑level deny lists, enforce DNS filtering for aktiifkanpaylateryy.fezu.my.id, and monitor outbound traffic for connections to that address.

Continuous re‑scanning of the domain with sandbox and URL‑analysis services is advised to capture any evolving payloads or landing‑page changes. Organizations using outbound email filters should ensure that messages containing links to this domain are quarantined or rejected. Because the underlying hosting provider is not identified, threat‑intel teams should consider broader investigation of the IP’s hosting ASN and associated domains to uncover potential campaign infrastructure.