danaa-iindonesiaa[.]sqq[.]my[.]id

As of August 04, 2026, the domain danaa-iindonesiaa.sqq.my.id has been confirmed as a phishing site. This domain resolves to the IP address 104.21.2.15 and is currently listed on one security blocklist. Notably, 13 out of 91 security vendors on VirusTotal have flagged this domain, indicating a significant level of suspicion and risk associated with it. The domain is still active and has been blocked by the security solution PhishDestroy.

The SSL certificate for the domain is issued by Google Trust Services, which may be an attempt to lend legitimacy to the site. However, the presence of a reputable SSL certificate does not negate the high risk of phishing, as threat actors increasingly use legitimate certificates to evade detection. The nameservers for the domain are not found, which could suggest recent domain activity or an attempt to obscure the domain's infrastructure.

Given the current status and the number of security vendors flagging the site, it is strongly recommended that network defenders block access to this domain to prevent potential phishing attacks. Additional monitoring and user education should be implemented to ensure that individuals do not inadvertently interact with this domain. The exact content and target of the phishing site have not yet been analyzed, but the high risk level and active status warrant immediate action.