pgrmproomo2026[.]indo-webq[.]my[.]id

This domain, pgrmproomo2026.indo-webq.my.id, was registered on February 21, 2026, through registrar PT JC Indonesia and is currently offline. Infrastructure analysis reveals it was hosted behind Cloudflare nameservers (carlane.ns.cloudflare.com, ganz.ns.cloudflare.com) and resolved to IP 188.114.96.3, part of AS13335 Cloudflare, Inc. in the United States. The site returned an HTTP directory listing titled 'Index of /', indicating either an incomplete phishing deployment or an exposed staging environment. No SSL certificate was present at the time of assessment.

Six of 95 security vendors on VirusTotal flagged the domain as malicious, and it appears on one security blocklist, specifically PhishDestroy. The domain has not been observed on Safe Browsing or other major threat intelligence platforms, and no brand or scam type is explicitly identified in the available metadata. The lack of a branded page title or known phishing kit suggests this may be a generic credential-harvesting or redirect operation, though the exact target remains unconfirmed.

Defenders should treat this domain as elevated risk due to its Cloudflare-hosted infrastructure, directory listing exposure, and detection by multiple security vendors. The absence of SSL and the domain's offline status limit further analysis, but historical DNS and IP associations should be reviewed for related malicious activity. Blocking the domain and its resolved IP at the perimeter is recommended, along with monitoring for re-activation or shifts to alternative hosting.