layananid-fromcstmer[.]verceloffcial[.]com
“𝗗𝗔𝗡𝗔 | 𝗖𝘂𝘀𝘁𝗼𝗺𝗲𝗿 𝗖𝗮𝗿𝗲 𝗗𝗔𝗡𝗔”
layananid-fromcstmer.verceloffcial.com — Konten tidak tersedia. Peniruan identitas merek: DANA; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 18/93 (BitDefender, Cluster25, CRDF, CyRadar, ESET); URLQuery 4 alerts; URLScan malicious verdict; PhishDestroy score 95/100. Registrar: CV. Rumahweb Indonesia.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
The domain layananid-fromcstmer.verceloffcial.com was registered on February 21, 2026 through CV. Rumahweb Indonesia and is currently taken offline. Infrastructure analysis shows the domain resolves to the IP address 104.21.53.172, which belongs to Cloudflare, Inc. (AS13335) and is geolocated in the United States. The authoritative nameservers are ingrid.ns.cloudflare.com and mark.ns.cloudflare.com, indicating the use of Cloudflare’s DNS service. No TLS certificate is presented for the site, meaning any HTTP connections would be unencrypted.
The page title that was captured during the brief live window reads "𝗗𝗔𝗡𝗔 | 𝗖𝘂𝘀𝘁𝗼𝗺𝗲𝗿 𝗖𝗮𝗿𝗲 𝗗𝗔𝗡𝗔", directly referencing the Indonesian digital wallet brand DANA. This aligns with the reported scam type of brand impersonation, targeting DANA customers. VirusTotal scans flagged the domain in 18 of 93 security vendors, demonstrating a moderate level of detection across the community. The domain appears on one public security blocklist and has a Gridinsoft trust score of 0 out of 100, both strong indicators of malicious intent.
Additionally, PhishDestroy has listed the domain as blocked, reinforcing the assessment that it was used for phishing or credential harvesting. While the exact payload or credential‑stealing mechanism has not been publicly disclosed, the combination of a DANA‑related page title, multiple vendor detections, a zero trust score, and blocklist listings provides concrete evidence that the domain was employed to impersonate DANA and lure users. Defenders should continue to block the domain at network perimeter and DNS layers, monitor for any residual traffic to the associated Cloudflare IP, and educate DANA users about unsolicited links that reference the brand. Given the offline status, ongoing observation of the hosting infrastructure is advised in case the operators reactivate the domain or shift to a new host.
Intelijen Keamanan Jaringan
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Cloudflare DNS | layananid-fromcstmer.verceloffcial.com |
malicious | Sinkholed |
| DNS4EU | layananid-fromcstmer.verceloffcial.com |
malicious | Sinkholed |
| Hagezi Threat Feed | layananid-fromcstmer.verceloffcial.com |
malicious | Sinkholed |
| OpenDNS | layananid-fromcstmer.verceloffcial.com |
phishing | Phishing Block |
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Tangkapan tersimpan
Intelijen Domain
Rincian teknisDNS, SAN SSL, cap waktu
ICANN OVERSIGHT
Registration: verceloffcial.com
Akreditasi dan konteks RAA
Akreditasi dan konteks RAA
Registrar accreditation and DNS abuse obligations
For the registrable domain verceloffcial.com behind this subdomain, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Analisis VirusTotal
Bukti & Laporan Eksternal
PD-20260202-444318 Recipient: abuse@rumahweb.co.id Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive