# PhishDestroy domain threat record: bantuan-malay.biz.id Content language: English Canonical HTML report: https://phishdestroy.io/domain/bantuan-malay.biz.id/ Machine-readable companion: https://phishdestroy.io/domain/bantuan-malay.biz.id/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: not observed active - First observed by PhishDestroy: 2026-09-12 14:09:59 UTC - Last availability or vendor check: 2026-10-21 01:15:52 UTC - Stored record updated: 2026-10-22 14:21:06 UTC - VirusTotal detections in the stored snapshot: 11/89 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored classification - Targeted brand: telegram ## Stored infrastructure - Observed IP address: 188.114.96.3 - Registrar in stored WHOIS data: PT Dewabisnis Digital Indonesia - Registration date (registry RDAP, biz.id): 2013-09-09 16:13:36 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a095f4-9f21-74d7-8d82-4bdd1416424f/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/bantuan-malay.biz.id - Certificate Transparency search: https://crt.sh/?q=%25.bantuan-malay.biz.id - Web Archive lookup: https://web.archive.org/web/*/https://bantuan-malay.biz.id/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview bantuan-malay.biz.id is an impersonation phishing site. Its name pairs the Malay word for aid or assistance with 'malay', which points to a lure aimed at Malay-speaking users. PhishDestroy first flagged it on 2026-09-12. The site went offline on 2026-09-17, and as of 2026-10-19 its DNS no longer resolves. How the scam works Aid-themed impersonation pages copy the look of a trusted organisation or assistance program. They promise a payout or benefit, then ask visitors to 'verify' their identity, bank details or account logins, and the scammers keep whatever is typed into the form. Victims lose those credentials and personal details, and sometimes money paid as a fake processing fee. When it was captured, the page showed only 'Index of /', a bare directory listing, while our classification is impersonation phishing. Evidence On 2026-09-13, 11 of 89 VirusTotal engines flagged the domain, including alphaMountain.ai, BitDefender, CyRadar, Forcepoint ThreatSeeker, Fortinet, G-Data, Gridinsoft and Lionic. Spamhaus lists it in its DBL under the phishing category, which matters because many mail and DNS filters block it automatically on that basis. It appears in four AlienVault OTX threat pulses. It is also on the PhishDestroy blocklist. Infrastructure The domain was registered on 2026-03-01 through PT Dewabisnis Digital Indonesia. That is roughly six months before it was detected, so it was either held in reserve or quietly active before anyone flagged it. Traffic ran through Cloudflare (AS13335, IP 188.114.96.3, US), which hides the server actually hosting the content. It lasted only five days between first detection and going offline, a short life typical of disposable phishing domains. What to do If you entered a password on this site, change it now on the real service and anywhere else you reuse it, then turn on two-factor authentication. If you gave bank or card details, contact your bank to block the card and dispute any charges. If you shared ID numbers or other personal details, expect follow-up scam calls or messages that use them, and never pay any 'fee' to release aid or a payout. Defenders should block the domain at DNS and mail gateways, and search logs for users who visited it between 2026-09-12 and 2026-09-17. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a095f4-9f21-74d7-8d82-4bdd1416424f/ VirusTotal report: https://www.virustotal.com/gui/domain/bantuan-malay.biz.id Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=bantuan-malay.biz.id Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-19 10:19:23 UTC ## Stored page captures - Primary capture: https://i.ibb.co/S7xn6tRw/10686432330c.png Captured: 2026-09-12 14:11:38 UTC - URLScan capture 1: https://screenshots.phishdestroy.io/01a095f4-9f21-74d7-8d82-4bdd1416424f.png Captured: 2026-09-12 14:11:38 UTC Source report: https://urlscan.io/result/01a095f4-9f21-74d7-8d82-4bdd1416424f/ - URLScan capture 2: https://urlscan.io/screenshots/01a09323-34f4-706e-9894-ca2ec342f7fe.png Captured: 2026-09-12 14:09:59 UTC Source report: https://urlscan.io/result/01a095f4-9f21-74d7-8d82-4bdd1416424f/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/7720c7f3-a482-466b-a004-87b2a81d64a0.png Captured: 2026-09-12 14:12:50 UTC Source report: https://radar.cloudflare.com/scan/7720c7f3-a482-466b-a004-87b2a81d64a0 SHA-256: 2cc86c511e5e4fe64e58230ba30011ed51db6b0d47fed2307a65904a6f7b1a2b - URLScan · 2026-09-12: https://screenshots.phishdestroy.io/us/01a09323-34f4-706e-9894-ca2ec342f7fe.png Captured: 2026-09-12 01:02:39 UTC Source report: https://urlscan.io/result/01a09323-34f4-706e-9894-ca2ec342f7fe/ SHA-256: e9cc66d5e425f2e5a41f75f2ec78cd21b1c24028700dcbf7ed9be1bddfa5200e - URLScan · 2026-09-12: https://screenshots.phishdestroy.io/us/01a095f5-b228-7427-9844-d1fa8553ca34.png Captured: 2026-09-12 14:11:49 UTC Source report: https://urlscan.io/result/01a095f5-b228-7427-9844-d1fa8553ca34/ SHA-256: 0f58b92651a6c04b64075c51e6ccd415072cfa253fa878f929be38530457a1a6 ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T00:18:33Z", "uuid": "01a095f4-9f21-74d7-8d82-4bdd1416424f", "scanned_at": "2026-09-12T14:10:39Z", "final_url": "https://bantuan-malay.biz.id/0011/", "status": 200, "redirected": "same-domain", "redirects": [ { "to": "https://bantuan-malay.biz.id/0011", "from": "http://bantuan-malay.biz.id/0011", "status": 307 }, { "to": "https://bantuan-malay.biz.id/0011/", "from": "https://bantuan-malay.biz.id/0011", "status": 301 } ], "ip": "188.114.97.3", "domains": [ "d.top4top.io", "cdnjs.cloudflare.com", "fonts.gstatic.com", "c.top4top.io", "e.top4top.io", "code.jquery.com", "fonts.googleapis.com" ], "ips": [ "142.251.13.94", "65.21.235.194", "135.181.63.70", "146.59.143.184", "2a04:4e42::411", "104.17.24.14", "2a00:1450:4001:c15::5f", "188.114.97.3" ], "asns": [ "15169", "24940", "16276", "54113", "13335" ], "countries": [ "US", "FI", "FR", "DE" ], "doc_hash": "d3418730d52c405e3700c5287aa352510ae8b64d1e566b1b4c2d5f292cf5549d", "globals": [ "$", "jQuery", "bootstrap", "phpSettings", "TxtType" ], "tls": { "san": [ "*.bantuan-malay.biz.id", "bantuan-malay.biz.id" ], "cipher": "AES_128_GCM", "issuer": "YE2", "subject": "bantuan-malay.biz.id", "protocol": "QUIC", "valid_to": "2026-11-24T14:52:24Z", "valid_from": "2026-08-26T14:52:25Z" }, "domain_age_days": 194, "apex_age_days": 194, "tls_age_days": 16, "tls_valid_days": 89, "requests": 12, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 99, "malicious": true }, "overall": { "score": 0, "malicious": false } }, "headers": { "server": "cloudflare", "content-type": "text/html; charset=UTF-8" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T02:31:45Z", "uuid": "7720c7f3-a482-466b-a004-87b2a81d64a0", "scanned_at": "2026-09-12T14:12:50Z", "final_url": "https://bantuan-malay.biz.id/", "status": 200, "history": [ { "url": "https://bantuan-malay.biz.id/", "status": 200 } ], "dom_hash": "f27df06ccecbebd2b59e8f027d1cd6b57939f2b67832db29f2512b3cc6835af2", "doc_hash": "68ac041a39bdf04d292fd5bd91ee3f170910b00b9594988d9553e9d0990f2614", "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "bantuan-malay.biz.id", "type": "A", "value": "188.114.96.0" }, { "name": "bantuan-malay.biz.id", "type": "A", "value": "188.114.97.0" }, { "name": "bantuan-malay.biz.id", "type": "AAAA", "value": "2a06:98c1:3121::" }, { "name": "bantuan-malay.biz.id", "type": "AAAA", "value": "2a06:98c1:3120::" } ], "dnssec_valid": false, "ip": "188.114.96.0", "whois": { "registrar": "PT Dewabisnis Digital Indonesia", "nameservers": [ "heidi.ns.cloudflare.com", "titan.ns.cloudflare.com" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-22T16:20:44Z", "analysis_at": "2026-10-12T17:13:12Z", "stats": { "timeout": 0, "harmless": 47, "malicious": 12, "suspicious": 1, "undetected": 32 }, "detections": { "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "MalwareURL": "phishing", "BitDefender": "phishing", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "created": "2026-03-01T00:00:00Z", "updated": "2026-03-01T00:00:00Z", "first_seen": "2026-03-01T19:08:21Z", "dns": [ { "ttl": 21600, "type": "NS", "value": "titan.ns.cloudflare.com" }, { "ttl": 300, "type": "A", "value": "104.21.78.24" }, { "ttl": 21600, "type": "NS", "value": "heidi.ns.cloudflare.com" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3031::ac43:d71a" }, { "ttl": 300, "type": "TXT", "value": "google-site-verification=eNIUKLpyUiyVd1Q86ilCsMTlXQCsaQpBNhzS5XyoWQ0" }, { "ttl": 300, "type": "A", "value": "172.67.215.26" }, { "ttl": 300, "type": "AAAA", "value": "2606:4700:3030::6815:4e18" }, { "ttl": 1800, "type": "SOA", "rname": "dns.cloudflare.com", "value": "heidi.ns.cloudflare.com" } ], "dns_at": "2026-09-12T10:39:59Z", "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c", "cert": { "san": [ "*.bantuan-malay.biz.id", "bantuan-malay.biz.id" ], "issuer": "Let's Encrypt / YE2", "serial": "558aa88ce9204f641e7f738b650bdab672d", "sha256": "f34b0b3d2702d3548a15d20f802e31f6c1959e89dab8112a8840e6b47d28e844", "subject": "bantuan-malay.biz.id", "valid_to": "2026-11-24T14:52:24Z", "valid_from": "2026-08-26T14:52:25Z" } } } ```