amagraproduction[.]id

This domain amagraproduction.id is currently active and classified as a high-risk generic phishing threat. Infrastructure analysis reveals that it resolves to IP 172.67.211.153, is registered through Cloudflare, Inc., and employs Cloudflare technologies including HTTP/3 along with an SSL certificate from Google Trust Services. Detection evidence includes presence on 2 security blocklists, flags from PhishDestroy and BLP-Malware, a VirusTotal score of 3 detections out of 95 vendors, and appearances in 23 AlienVault OTX threat intelligence pulses. The Gridinsoft trust score stands at 0 out of 100. The observed page title is Amagra Production. Since the domain remains active as of the report date, defenders reviewing this domain are advised to implement blocks at network perimeters and investigate any user reports of interactions with this resource. The exact nature of the phishing campaign remains uncertain without further page content analysis.