dannapaayllaatersx[.]brainzy[.]biz[.]id

Analysis of the domain dannapaayllaatersx.brainzy.biz.id, observed on 24 July 2026, indicates it was registered on 21 February 2026. The site is listed on a single security blocklist and is actively blocked by PhishDestroy. Reputation services assign extremely low scores: Gridinsoft rates it 0 out of 100, and Scamadviser 1 out of 100. The domain resolves to IP address 104.21.90.9, which belongs to Cloudflare, Inc. (AS13335) and is geolocated to the United States.

The TLS certificate presented is identified as “WE1”, confirming that HTTPS is in use despite the malicious intent. The page title returned from the server reads “𝗗𝗔𝗡𝗔 | 𝗖𝘂𝘀𝘁𝗼𝗺𝗲𝗿 𝗖𝗮𝗿𝗲 𝗗𝗔𝗡𝗔”, suggesting a fabricated customer‑care portal. VirusTotal reports that 16 of 95 scanned security vendors flagged the domain, reinforcing its classification as a phishing resource. The site is currently offline, preventing live interaction, but historical evidence confirms its operation as a generic phishing endpoint.

Uncertainties remain regarding the specific phishing kit employed and any additional infrastructure that may have been used prior to takedown. Defenders should continue to block the domain at DNS and network layers, monitor for any resurgence of the hostname or related Cloudflare IP ranges, and update detection signatures to reflect the observed page title and low trust scores. Ongoing vigilance is advised given the low reputation metrics and multiple vendor detections.