dana-bantuan[.]layanan-resmii[.]biz[.]id

This domain, dana-bantuan.layanan-resmii.biz.id, was configured to present a page with a title labeled as xxx. Based on the domain name structure, which contains phrases associated with official assistance programs in Indonesia, the site likely impersonated a government aid platform to deceive users. The primary threat posed by this domain was phishing, where visitors may have been tricked into submitting sensitive personal or financial information under the pretense of applying for benefits.

Technical analysis shows the domain was flagged by 19 out of 95 VirusTotal vendors, including detections from ADMINUSLabs, BitDefender, Chong Lua Dao, Cluster25, and CRDF. It was also listed on 1 blocklist. The domain resolved to IP address 172.67.167.172, located in the United States and hosted by AS13335 Cloudflare, Inc. The nameservers were recorded as NS_NOT_FOUND, indicating missing or misconfigured DNS records. The domain risk score is 73.

As of the time of analysis, the domain status is DOWN or OFFLINE, meaning the site is not currently accessible. The high detection rate and domain risk score indicate that this was a malicious domain involved in phishing activities. Users should avoid any interaction with this domain or similar variations, and any credentials entered on the site should be considered compromised.