fiturmenu-idd[.]actglio[.]my[.]id

The domain fiturmenu-idd.actglio.my.id was observed on July 26, 2026 as part of a high‑risk generic phishing campaign. Infrastructure analysis shows the domain resolves to the IPv4 address 188.114.97.3. No authoritative name server records were returned (NS_NOT_FOUND), indicating that the domain’s DNS configuration is either hidden or misconfigured, which complicates further enumeration of its hosting environment. VirusTotal scans have recorded detections from 10 of 91 security vendors, confirming that multiple AV engines consider the domain malicious. The same domain is listed on a single public security blocklist and has been explicitly blocked by the PhishDestroy mitigation service.

The domain remains active at the time of reporting, and its operational status has not changed since the last observation. Because no additional metadata such as SSL certificates, HTTP response codes, page title, or content snapshots are available, the precise phishing vector (e.g., credential harvesting page) cannot be verified. The lack of visible nameserver information also prevents attribution of the hosting provider or ASN. Defenders should add 188.114.97.3 to network‑level deny lists, enforce DNS‑based blocking of fiturmenu-idd.actglio.my.id, and monitor for any outbound connections to that address.

Endpoint security solutions should be updated to include the 10 vendor detections listed by VirusTotal. Continuous re‑scanning of the domain is advised to capture any changes in payload or hosting. Given the confirmed detections and active status, the domain poses a high risk to users who may be directed to it via email or malicious links. Immediate mitigation is recommended.