repository[.]rajawali[.]ac[.]id

The domain repository.rajawali.ac.id was registered on 21 February 2026 through PT JC Indonesia. DNS resolution points to 103.30.147.55, an address announced by AS46050 within Indonesia. The server presents a valid Let’s Encrypt certificate (E7) and returns HTTP 200 for the root path, with the page title “Repository”. Technical fingerprinting identifies PHP, Windows Server, OpenSSL, Bootstrap, Apache HTTP Server, jsDelivr, and jQuery. The domain appears on a single security blocklist and has been flagged by PhishDestroy. Gridinsoft assigns a trust score of 0 / 100. The use of generic hosting nameservers ns1.idwebhost.com and ns2.idwebhost.com aligns with patterns observed in other credential‑harvesting infrastructure. No additional intelligence such as malware payloads or victim reports is available, and the content of the site has not been analysed beyond the title. Defenders should block the domain at the network perimeter, monitor DNS queries for the associated IP and nameservers, and consider adding the IP to threat‑intel feeds. Ongoing observation is recommended to detect any changes in hosting or content. The current classification remains under investigation, but the available evidence supports a high confidence that the site is being used for phishing.