litensi[.]id

Analysis of litensi.id shows the domain was registered on 25 Mar 2026 through PT Cloud Hosting Indonesia and is hosted behind Cloudflare (IP 104.26.0.180, CA). The TLS certificate is issued by Google Trust Services under the WE1 identifier, indicating HTTPS is enabled. DNS resolution uses Cloudflare nameservers justin.ns.cloudflare.com and kara.ns.cloudflare.com, and the MX configuration points to Google Workspace (aspmx.l.google.com priority 1, alt2.as… priority 5). HTTP requests return a 403 status and the only observed page title is “Just a moment…”, which provides no insight into the payload. The domain is listed on at least one phishing blocklist, has been flagged by PhishDestroy, and 1 of 94 VirusTotal scanners raised a detection. Gridinsoft assigns a trust score of 0/100 and AlienVault OTX contains a single pulse referencing the domain. The evidence points to a high‑risk generic phishing operation, but the exact phishing content (e.g., credential‑stealing page) has not been captured. Defenders should add litensi.id to domain blocklists, enforce TLS inspection, and monitor outbound connections to the Cloudflare IP. Continuous DNS and HTTP probing is recommended to capture any future payload changes.