pembatalan-penghapus4n[.]my[.]id

The domain pembatalan-penghapus4n.my.id was registered on July 12, 2026 through PT Jagoan Hosting Indonesia and remains active as of the report date, July 24, 2026. DNS resolution points to the IPv4 address 103.169.207.134, and the authoritative nameservers are ns1.jagoanhosting.com and ns2.jagoanhosting.com. The domain appears on two reputable phishing blocklists, PhishDestroy and OpenPhish, indicating that it has been observed delivering malicious content or credential‑stealing pages. VirusTotal analysis shows that 12 of 91 security vendors have flagged the domain, reinforcing the suspicion of malicious use. The risk rating is high, and the infrastructure is considered active.

Public data does not include SSL certificate details, HTTP status codes, page title, or any observed brand targeting, so the exact content and technique of the phishing campaign cannot be confirmed at this time. No additional indicators such as malware hashes, payload URLs, or command‑and‑control endpoints are available.

Defenders should prioritize blocking the domain pembatalan-penghapus4n.my.id at the DNS and proxy layers, and consider adding the associated IP address 103.169.207.134 to network‑level deny lists. Continuous monitoring of DNS queries for this domain and its nameservers is advised, as is periodic re‑scanning on VirusTotal or similar platforms to capture any changes in vendor detections. Inclusion of the domain and its IP in internal threat‑intel feeds will help correlate future activity and reduce exposure to this high‑risk phishing infrastructure.