otepe46[.]id

PhishDestroy identifies otepe46.id as an active credential theft domain. The site impersonates legitimate login portals to harvest user credentials, posing a direct risk to account security. The domain was registered on April 24, 2026, through PT Web Media Technology Indonesia and resolves to IP 188.114.96.3. A Let's Encrypt SSL certificate is in use, and the domain remains undetected by VirusTotal with 1/95 security vendors flagging it as malicious. No blocklist entries or trust score improvements have been recorded to date.

This domain exhibits multiple red flags indicative of a credential theft campaign. The recent creation date (April 24, 2026) suggests opportunistic deployment, while the use of a legitimate SSL certificate (Let's Encrypt) aims to deceive users into trusting the page. The hosting infrastructure (188.114.96.3) is associated with known low-trust networks, further corroborating suspicious activity. The registrar, PT Web Media Technology Indonesia, has not been implicated in prior abuse cases, but the domain's lack of detection underscores the need for proactive blocking.

To mitigate risk, users should avoid interacting with otepe46.id and report the domain to their security teams or via platforms like PhishDestroy. Organizations should block the domain at the network level and inspect DNS logs for queries to 188.114.96.3. Credential theft phishing pages often mimic popular services; users should verify URLs before entering login details and enable multi-factor authentication to limit potential damage. Immediate action is critical to prevent credential harvesting and downstream account takeovers.