fromnewxdnaaidn[.]shineeni[.]my[.]id

The domain fromnewxdnaaidn.shineeni.my.id is identified as a generic phishing threat with a high risk status and is currently active.

This domain poses as a credential harvesting scam, likely mimicking a trusted service to trick users into submitting sensitive login information. PhishDestroy identifies this as a high-risk phishing domain, with 21 of 95 VirusTotal security vendors flagging it as malicious. The domain resolves to IP address 172.67.149.65 and is blocked by OpenPhish, PhishDestroy, and PhishingArmy. It holds a Let’s Encrypt SSL certificate and has appeared on three distinct security blocklists, indicating widespread malicious reputation among threat intelligence platforms.

Users should avoid accessing this domain entirely, as it has been confirmed as a phishing site designed to steal login credentials or personal data. Concrete indicators include its association with 21 malicious vendor detections and blocklisting by multiple security services. Recommendations include immediately reporting the domain if encountered, not engaging with any prompts or forms, and ensuring robust account recovery steps are in place for any potentially exposed services. Network administrators are advised to block both the domain and its resolving IP at the firewall level to prevent internal exposure.