pinjamancepatsdri[.]seller[.]biz[.]id

This domain is assessed as elevated risk and classified as generic_phishing targeting DANA brand authentication flows, indicating likely credential theft intent. Current status shows the infrastructure has been taken offline, reducing active exposure but not eliminating residual risk from historical records or mirrors.

VirusTotal reports 22/95 security vendors flagging the domain. It appears on the PhishDestroy blocklist. The domain was registered through PT JC Indonesia and created on March 06, 2026. DNS resolves to 104.21.46.51 hosted under AS13335 (Cloudflare, Inc.), IP geolocation United States. SSL certificate is absent, indicating no TLS trust layer during observed activity. Page title observed: 'DANA - Apa pun transaksinya selalu ada DANA'. Current status: taken offline.

Mitigation should include blocking at DNS and URL filtering layers, adding indicators to enterprise threat intelligence feeds, and monitoring for typosquatting variants under seller.biz.id. Credential protection controls such as MFA enforcement and user awareness training for DANA impersonation pages are recommended. Historical artifacts should be used for retro-hunting across proxy and web logs.