danaindonesia-l[.]netlify[.]app

This domain, danaindonesia-l.netlify.app, is flagged as a high-risk generic phishing threat and remains active as of the July 31, 2026 report date. Infrastructure analysis shows the domain is hosted on Netlify's platform and resolves to IP address 63.176.8.218. The nameserver records are not found, which is consistent with a subdomain-based hosting setup where the parent domain handles DNS delegation. VirusTotal data indicates that 6 out of 91 security vendors currently flag this domain as malicious, and it appears on one security blocklist, specifically PhishDestroy, which has taken action to block access.

No additional blocklist or threat intelligence platform details were provided in the available data. The exact content of the page has not been analyzed, so the specific brand or service it attempts to impersonate remains unconfirmed; the domain name suggests a possible reference to Indonesian financial services, but this inference is not supported by direct evidence and should not be treated as fact. Defenders should treat this domain as an active threat and ensure it is blocked at the network and email gateway levels. Given the low but non-zero vendor detection rate, reliance on a single blocklist is insufficient; organizations should implement their own URL filtering rules.

It is also advisable to monitor for related subdomains or variations under the netlify.app domain, as attackers frequently rotate infrastructure. The domain's continued operation despite blocklisting indicates that hosting provider takedown has not yet occurred, and users who may have interacted with this domain should be alerted to the potential for credential theft or data compromise. Security teams should review access logs for any connections to this domain and investigate any credentials entered on its pages, resetting passwords if necessary.