cashdnnsa[.]pnow[.]biz[.]id

This domain, cashdnnsa.pnow.biz.id, is flagged as a brand impersonation phishing site specifically targeting DANA, a widely used digital payment platform. The site mimics legitimate customer support pages, using the title 'DANA | Customer Care DANA' to deceive users into believing they are interacting with official DANA services. Such impersonation tactics are commonly employed to harvest login credentials, personal information, or financial details from unsuspecting victims, posing a significant risk of identity theft and financial fraud.

Analysis indicates that the domain was registered on February 21, 2026, an unusually future-dated creation that may suggest attempts to evade detection or bypass security filters. The domain is currently offline but was previously hosted on Cloudflare infrastructure, resolving to the IP address 104.21.76.122. Notably, the site lacks an SSL certificate, a critical security red flag for any platform handling sensitive user data. Security vendors have flagged this domain as malicious, with 18 out of 95 engines on VirusTotal detecting it as a phishing threat. Additionally, the domain appears on one security blocklist and was proactively blocked by anti-phishing systems.

If you visited cashdnnsa.pnow.biz.id or interacted with any content from this domain, immediate action is required. First, cease all communication with the site and avoid entering any personal or financial information. If you provided login credentials, change your DANA account password immediately and enable multi-factor authentication if available. Monitor your account for unauthorized transactions and report any suspicious activity to DANA’s official support channels. Consider running a full security scan on your device to detect potential malware or keyloggers. Finally, report the domain to relevant cybersecurity organizations to aid in broader threat mitigation efforts.