airminumbiru[.]com

The domain airminumbiru.com is a generic phishing site posing an elevated risk of credential theft or fraudulent activity. It does not impersonate a specific brand or employ a known drainer kit. As of the latest verification, airminumbiru.com has been taken offline, though prior activity classified it as a phishing threat.

Technical indicators confirm the domain's suspicious nature. airminumbiru.com was flagged by 1 of 95 VirusTotal security vendors, including Gridinsoft, which assigned a trust score of 0/100. It appears on 1 security blocklist (PhishDestroy) and was registered through PT Ardh Global Indonesia on October 30, 2006. The domain resolves to IP address 180.235.148.89, located in Indonesia under AS45731 (ARDH GLOBAL INDONESIA, PT). The SSL certificate is issued by Let's Encrypt (E7), and the observed page title was 'Not Found (#404)'. Detected technologies include PHP, Leaflet, Yii, Bootstrap, jQuery-pjax, Apache HTTP Server, Select2, and reCAPTCHA. Google Safe Browsing does not currently flag the domain.

Individuals who may have interacted with airminumbiru.com should take immediate safety steps. If login credentials were entered, change passwords for all potentially compromised accounts and enable two-factor authentication (2FA). Monitor accounts for unauthorized activity and report any suspected fraud to financial institutions. To report the domain, submit it to platforms like Google Safe Browsing, PhishTank, or local cybersecurity authorities. Victims of phishing scams may also file complaints with organizations such as the FTC (ReportFraud.ftc.gov) or IC3 (ic3.gov).