# pembatala4n-pinjamaan.plck.my.id — SUSPICIOUS

> This domain (pembatala4n-pinjamaan.plck.my.id) hosts a fake online loan scam page, undetected by 95 antivirus engines.

## Summary
PhishDestroy identifies pembatala4n-pinjamaan.plck.my.id as an active online loan scam site designed to deceive users into submitting sensitive financial and personal data under false pretenses. The fraudulent page mimics legitimate loan application portals, tricking victims into providing bank account details, national ID numbers, and employment verification documents. This domain is particularly dangerous because it leverages a convincing facade (including a Google Trust Services SSL certificate) while operating outside regulated financial systems, leaving victims vulnerable to identity theft and financial fraud.  This domain was flagged by PhishDestroy's analysis pipeline after resolving to IP 172.67.190.202 with a valid SSL certificate issued by Google Trust Services. Notably, VirusTotal currently shows 0 detections out of 95 antivirus engines, indicating this threat remains under the radar of most security vendors despite its malicious intent. The domain's structure (plck.my.id) suggests affiliation with a free subdomain service, while its specific path (pembatala4n-pinjamaan) mimics Indonesian loan terminology, targeting speakers of that language. While exact creation dates and blocklist counts require further OSINT verification, the complete lack of antivirus detection underscores the stealthy nature of this operation.  If you have visited pembatala4n-pinjamaan.plck.my.id, immediately cease all communication with the site and do not submit any additional information. Check your bank statements for unauthorized transactions and consider placing a fraud alert with your credit bureau. Reset passwords for any accounts where you reused credentials, and run a full antivirus scan using updated security software. Report the domain to your local cybercrime unit and relevant financial protection agencies. Avoid similar loan offers promising 'guaranteed approvals' or 'no credit checks'—legitimate lenders never operate this way. Monitor your credit reports for at least 12 months following exposure to detect identity theft early.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: REGISTRAR_NOT_FOUND
- IP: 172.67.190.202

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/domains/pembatala4n-pinjamaan.plck.my.id
- PhishDestroy: https://phishdestroy.io/domain/pembatala4n-pinjamaan.plck.my.id/
- LLM endpoint: https://phishdestroy.io/domain/pembatala4n-pinjamaan.plck.my.id/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/pembatala4n-pinjamaan.plck.my.id/
Last updated: 2026-04-07