otpsaya[.]com

The domain otpsaya.com was registered on June 17, 2026 through the HOSTINGER operations platform (UAB). The site presents a page titled “OTPSaya – Layanan OTP Tercepat & Termurah di Indonesia”, positioning itself as a rapid and low‑cost OTP provider for Indonesian users. The site is reachable over HTTPS using a Let’s Encrypt certificate (YR1), and the HTTP response code is 200, indicating normal web server operation. Network analysis shows the domain resolves to the IPv4 address 216.198.79.65, which is owned by Cypress Communications, LLC and geolocated to the United States. The host has a Gridinsoft trust score of 0 out of 100, and no detections are reported on VirusTotal (0/95 scanners). The IP appears on a single security blocklist and is actively blocked by PhishDestroy, confirming that external threat‑blocking services have flagged the host. Open source intelligence indicates that otpsaya.com appears in eight AlienVault OTX pulses, suggesting that the domain has been observed in multiple community‑reported incidents. The combination of a newly created domain, a low‑trust score, and its inclusion in threat feeds aligns with the generic_phishing classification assigned to the site. No additional artifacts such as malware binaries or command‑and‑control infrastructure have been disclosed, leaving the full extent of the campaign uncertain. Defenders should add otpsaya.com to URL filtering and DNS sink‑hole rules to prevent end‑users from accessing the site. Monitoring for outbound connections to 216.198.79.65 and correlating authentication logs for unusual OTP requests from Indonesian IP ranges can help identify potential credential‑harvesting attempts. Given the active blocklist status, continuous threat‑intel feed updates are recommended to capture any emerging indicators related to this domain.