aktf-dnaid[.]adrnt[.]my[.]id

This domain, aktf-dnaid.adrnt.my.id, is classified as a high‑risk generic phishing infrastructure and remains active as of the report date, 25 July 2026. DNS resolution points exclusively to the IPv4 address 188.114.97.3, indicating a single‑host deployment. A nameserver query returned NS_NOT_FOUND, meaning authoritative name‑server records are absent or deliberately concealed, which hampers attribution of the registrar.

VirusTotal analysis records six of ninety‑one security vendors flagging the domain, providing independent confirmation of malicious intent. The domain is listed on one external security blocklist and has been explicitly blocked by the PhishDestroy mitigation service, reinforcing the consensus that it should be treated as hostile. No further intelligence such as SSL certificate details, HTTP status codes, or page‑title information is presently available, leaving the underlying hosting environment and potential payload delivery mechanisms uncharacterized.

Defenders should immediately add aktf-dnaid.adrnt.my.id to local deny lists, enforce DNS‑based sinkholing to the IP 188.114.97.3, and ensure that outbound traffic to this address is blocked at perimeter firewalls. Continuous monitoring of the IP address for any change in ownership or additional domain registrations is advised, as the limited infrastructure could be expanded in future campaigns. Threat‑intelligence platforms should mark the domain with a high confidence malicious indicator and propagate the indicator across intrusion‑detection, endpoint‑protection, and secure‑email solutions to mitigate exposure.