cronous[.]my[.]id

The domain cronous.my.id was observed returning HTTP 403 and presenting the page title “Parked Domain name on Hostinger DNS system”. It resolves to the Cloudflare address 188.114.97.3, which is located in Canada and is associated with Cloudflare, Inc. The site serves a valid TLS certificate issued by Let’s Encrypt (E7), indicating that HTTPS is enabled despite the parked status. VirusTotal analysis recorded four detections out of ninety‑one scanning engines, and the domain is listed on three public blocklists, including PhishDestroy, MetaMask, and SEAL. Additional security feeds also flag the domain, raising its risk profile.

Technical fingerprints show the presence of Google Analytics, Cloudflare Browser Insights, and HTTP/3 support, suggesting that tracking scripts have been loaded on the page. The domain was registered on 20 March 2026 through PT Web Media Technology Indonesia, a registrar operating in Indonesia. No malicious payload or credential‑harvesting page was captured because the site is currently taken offline, and the only visible content is the generic parked‑domain placeholder.

Consequently, concrete evidence of an active phishing campaign is absent, but the combination of a 403 response, a parked‑domain label, multiple vendor detections, and inclusion on dedicated anti‑phishing blocklists strongly indicates that the domain has been used for generic phishing attempts in the recent past. Defenders should continue to block cronous.my.id, monitor DNS records for potential re‑hosting, and consider adding it to internal threat‑intel watches. Further investigation would be required to identify any specific phishing lures or victim data that may have been exposed while the domain was active.