bfinance[.]id

The domain bfinance.id is currently classified as a high‑risk generic phishing entity and remains active as of the report date, July 27, 2026. Registration records show the domain was created on November 17, 2023 and is registered through PT Web Media Technology Indonesia. DNS resolution points to the IP address 92.113.16.147, and the authoritative name servers are ns1.dns-parking.com and ns2.dns-parking.com, both typical of parked or low‑cost hosting services. Threat intelligence indicates that five out of ninety‑one security vendors on VirusTotal have flagged the domain, suggesting a modest but notable detection rate across scanning engines.

The domain appears on a single security blocklist and is explicitly blocked by the PhishDestroy service, reinforcing the perception of malicious intent. No additional data such as SSL certificate details, HTTP response codes, page title, or brand targeting has been disclosed, leaving the exact content and lure mechanisms of the site unverified. Analysts should treat any inbound traffic to bfinance.id as suspicious and enforce blocking at network perimeters.

Monitoring of DNS queries to the listed name servers and the resolved IP is recommended to detect potential pivot activity. Organizations employing web filtering should ensure the domain is added to deny lists, and endpoint protection solutions should be updated to reflect the five vendor detections. Continuous re‑evaluation is advised, as further forensic analysis of the web content may reveal additional indicators of compromise.