danaa4-indonesiiax[.]hzos[.]my[.]id

The domain danaa4-indonesiiax.hzos.my.id, associated with a critical threat score of 95/100, presents itself as a generic phishing operation and is currently down. Fourteen out of 95 security vendors, including BitDefender and Kaspersky, have flagged this domain as malicious, and it is listed on one public blocklist. Google Safe Browsing has not flagged it, indicating it may have been recently active without detection by that service.

Registrar information is not available, suggesting potential use of privacy protection or recent scrubbing. The domain was created on February 21, 2026, and first detected on February 26, 2026. The hosting IP is 188.114.97.3, which should be flagged as an indicator of compromise (IOC) for further investigation.

Immediate action is required: block the domain at the perimeter and flag the hosting IP for monitoring.