aktiffkan-paylatercc[.]fez[.]my[.]id

aktiffkan-paylatercc.fez.my.id is a subdomain of fez.my.id. PhishDestroy first observed the hostname on Aug 21, 2026. Current evidence score: 95/100 (critical).

Positive findings are stored from 2 sources: VirusTotal and OpenPhish. VirusTotal recorded 16 detections among 91 engines: alphaMountain.ai, BitDefender, CRDF, Emsisoft, Fortinet, G-Data, Gridinsoft, Kaspersky, LevelBlue, Lionic, Netcraft, OpenPhish, Seclookup, SOCRadar, Sophos, Webroot on Aug 21, 2026 at 17:20 UTC. OpenPhish listed the hostname in the separate external-blocklist snapshot on Aug 21, 2026 at 22:20 UTC. Non-positive and contextual checks: Google Safe Browsing returned no flag on Aug 21, 2026 at 17:53 UTC. URLScan captured the page on Aug 21, 2026 at 17:17 UTC.

The collector marked the hostname reachable on Aug 21, 2026 at 17:17 UTC, but did not retain the HTTP response code. At collection time, the hostname resolved to 172.67.205.116 on AS13335 (Cloudflare, Inc.). The IP and ASN identify shared Cloudflare edge infrastructure; the origin server is not established by this address. The evidence archive retains 2 visual captures from PhishDestroy and URLScan; no page title was retained, so the captures preserve the landing-page appearance. TLS metadata lists Google Trust Services as the certificate issuer with validity through Sep 23, 2026; checked Aug 21, 2026 at 19:02 UTC.

The record contains 2 positive source findings supporting the current phishing classification. The stored fields do not identify an impersonated brand or victim interaction.