aktiffkan-paylater[.]yqq[.]my[.]id

The domain aktiffkan-paylater.yqq.my.id is currently active and has been identified as a generic phishing infrastructure. Analysis of open‑source intelligence shows that the domain resolves to the IP address 188.114.96.3, which is the sole host observed for this indicator. No nameserver records are returned, indicating that the authoritative DNS configuration is either hidden or misconfigured.

The domain has been listed on two public phishing blocklists and is actively blocked by the PhishDestroy and OpenPhish threat‑feed services, confirming that multiple downstream security products already recognize it as malicious. VirusTotal scans have returned 19 positive detections out of 91 security vendors, providing additional corroboration of its malicious nature. No further details such as registrar information, SSL certificate data, HTTP response codes, or page title content are available in the current intelligence set, leaving those aspects of the infrastructure unverified.

Given the observed detection count, blocklist presence, and active status, defenders should treat traffic to or from aktiffkan-paylater.yqq.my.id as hostile. Recommended mitigation steps include adding the domain and its resolving IP address to network deny lists, updating web‑filtering policies to block the host, and monitoring outbound connections for any attempts to reach the IP 188.114.96.3. Continuous re‑evaluation is advised, as additional attributes such as registrar details or content signatures may emerge in future analyses.