pinjaman-01[.]barracuda[.]my[.]id

PhishDestroy has identified pinjaman-01.barracuda.my.id as an elevated-risk generic phishing domain. This domain was designed to impersonate the DANA brand, likely attempting to trick users into revealing login credentials or financial information through a fake customer care portal. The site is now offline, but the threat remains significant given its sophisticated imitation of a legitimate financial service.

Technical analysis reveals that pinjaman-01.barracuda.my.id resolves to IP address 104.21.48.76 and was registered through PT JC Indonesia on March 8, 2026. The domain lacks an SSL certificate, a critical red flag for any site handling sensitive data. VirusTotal data shows 22 out of 95 security vendors flagged this domain, and it appears on at least one security blocklist. These indicators collectively confirm a malicious intent, with a trust score of zero due to its recent creation and phishing design.

Users who may have encountered this domain should immediately change any passwords or PINs associated with their DANA account and enable two-factor authentication. Monitor account statements for unauthorized transactions and report any suspicious activity to DANA's official support channels. To avoid future threats, always verify the URL before entering credentials, use a trusted security solution, and rely on PhishDestroy's real-time threat database to check unknown links.