bantuanstr[.]rluapk[.]my[.]id

On July 24, 2026, the domain bantuanstr.rluapk.my.id was flagged as a phishing domain. The domain was registered on March 12, 2026, and has since been taken offline. Infrastructure analysis reveals that the domain was hosted on an IP address located in Singapore (SG) within the AS132203 Tencent Building, Kejizhongyi Avenue, specifically 43.156.236.31. The nameservers used were dora.ns.cloudflare.com and nicolas.ns.cloudflare.com, indicating the use of Cloudflare for domain management.

The registrar for this domain is PT Registrasi Neva Angkasa. The domain did not have an SSL certificate, which is a common indicator of potential phishing activity as legitimate sites often use SSL to secure connections. The page title, 'SUMBANGAN TUNAI RAHMAH 2026,' suggests that the site was likely impersonating a charitable or financial initiative, possibly targeting individuals who might be more susceptible to such scams.

The domain appears on one security blocklist, specifically PhishDestroy, which further corroborates the phishing classification. While the domain has been taken offline, it is important for defenders to remain vigilant and ensure that any residual infrastructure is monitored for potential reuse or related malicious activities. Additionally, users who may have interacted with this domain should be informed to change any potentially compromised credentials and to be cautious of similar sites in the future.