ruangotp[.]id

Domain ruangotp.id was observed on July 29, 2026 as an active generic phishing site. VirusTotal scans show that 2 out of 91 security vendors have flagged the domain, indicating a low but non‑zero detection rate. The domain also appears on a single external blocklist and is actively blocked by the PhishDestroy service, confirming that at least one reputable anti‑phishing feed considers it malicious.

No additional public intelligence such as OTX entries, registrar details, ASN, hosting IP, SSL certificate information, HTTP response codes, or trust‑score metrics are currently available in the shared dataset, so the broader infrastructure surrounding the domain cannot be fully profiled at this time. The limited detection footprint suggests the site may be newly deployed or using evasive techniques to avoid broader vendor coverage. Defenders should add ruangotp.id to local deny lists and ensure that network perimeter controls reference the PhishDestroy blocklist.

Email security gateways should be configured to treat any messages containing links to this domain as malicious, and users should be warned against clicking URLs that resolve to ruangotp.id. Continuous monitoring of VirusTotal and other reputation services is advised to capture any increase in vendor detections or new blocklist listings that could indicate escalation of the threat.