webb-dannaid[.]b4antuanresmll[.]my[.]id

The domain webb-dannaid.b4antuanresmll.my.id is designed to impersonate WhatsApp, a popular messaging platform. It has been flagged by 11 out of 95 vendors on VirusTotal, indicating a significant detection rate. The domain was first identified by PhishDestroy on February 26, 2026, and has since been taken offline.

This phishing operation uses the page title 'DANA - Apa pun transaksinya selalu ada DANA' to lure users into believing they are interacting with a legitimate service. The domain's hosting IP is 104.21.93.206, located in the United States and managed by Cloudflare, Inc. The SSL certificate is issued by WE1, which may not be a well-known certificate authority, adding to the domain's suspicious nature.

Although the domain is currently offline, its initial detection and subsequent flagging by multiple security vendors highlight the ongoing threat of impersonation scams. The platform risk score of 73 out of 100 further underscores the potential danger this domain posed when active. Phishing domains like this exploit the time gap between registration and detection by antivirus databases, making early detection crucial in preventing potential scams.