clearpaydagetta[.]nonimux[.]web[.]id

The domain clearpaydagetta.nonimux.web.id impersonates a legitimate service, posing a threat to users seeking to engage with financial transactions. With a VirusTotal score of 16/95, it has been flagged as potentially malicious, indicating a significant risk associated with its use. This domain's purpose appears to be to deceive individuals into providing sensitive information under the guise of a recognizable payment service.

Registered with PT JC Indonesia, the domain is relatively new, only three days old, which often suggests a higher likelihood of fraudulent intent. Its IP address, 172.67.133.48, is associated with shared hosting, which is commonly utilized by malicious actors to reduce costs while spreading their scams. The presence of one blocklist entry further supports its classification as a phishing site.

The domain is currently inactive, having been taken down by PhishDestroy. Immediate reporting and monitoring efforts were implemented to mitigate potential harm and prevent further abuse of this domain. Continuous surveillance will ensure that similar threats are addressed promptly as they arise.