dhfifufdaftarskrng[.]my[.]id

This domain, dhfifufdaftarskrng.my.id, is currently flagged for high-risk phishing activity following infrastructure analysis on July 12, 2026. The page title 'Index of /' indicates an exposed directory listing, a configuration often exploited to host malicious files or serve as a staging point for phishing campaigns. The domain was registered on March 6, 2026, through PT Cloud Hosting Indonesia and remains active with a 200 HTTP status code, suggesting no immediate takedown or remediation efforts. Security vendor detections provide additional context: 14 out of 95 engines on VirusTotal have flagged the domain, while Google Safe Browsing specifically classifies it under 'SOCIAL_ENGINEERING.' The domain appears on one security blocklist and resolves to the IP address 103.76.121.148, which is geolocated in Indonesia under AS136052. Nameservers ns01.cloudhost.id and ns02.cloudhost.id further link the infrastructure to the same hosting provider, indicating centralized control over the malicious endpoint. No SSL certificate is present, which is atypical for legitimate services but common in hastily deployed phishing operations. The absence of encryption may facilitate interception or further expose victims to credential theft. While the exact phishing kit or lure remains unconfirmed, the open directory structure and social engineering classification suggest the domain is likely serving fraudulent content directly or redirecting victims to other malicious resources. Defenders should prioritize blocking this domain at the DNS or network level, particularly given its active status and high-risk classification. Monitoring for connections to 103.76.121.148 and associated nameservers may help identify compromised systems within an organization. The lack of SSL and the exposed directory listing should be treated as strong indicators of compromise in log analysis or detection rules.