starrdnfromindo[.]zeuce[.]biz[.]id
“𝗗𝗔𝗡𝗔 | 𝗖𝘂𝘀𝘁𝗼𝗺𝗲𝗿 𝗖𝗮𝗿𝗲 𝗗𝗔𝗡𝗔”
starrdnfromindo.zeuce.biz.id — Konten tidak tersedia (HTTP 502). Peniruan identitas merek: DANA; Jenis penipuan: Brand Impersonation. Ringkasan bukti: VirusTotal 14/93 (ADMINUSLabs, alphaMountain.ai, BitDefender, CRDF, CyRadar); URLQuery 100 det.; URLScan malicious verdict; PhishDestroy score 95/100. Registrar: PT JC Indonesia.
Analisis terperinci PhishDestroy AI di bawah tetap berbahasa Inggris untuk menjaga catatan forensik asli.
On July 23 2026 the domain starrdnfromindo.zeuce.biz.id was observed in an elevated‑risk brand‑impersonation campaign targeting the Indonesian digital‑wallet service DANA. The domain was registered on 26 December 2025 through the registrar PT JC Indonesia. Infrastructure analysis shows the name resolves to IP 104.21.60.51, which belongs to Cloudflare’s network (ASN 13335) and is geolocated in the United States. The domain is served by Cloudflare nameservers algin.ns.cloudflare.com and meg.ns.cloudflare.com, and no TLS certificate is presented, indicating the site was delivered over plain HTTP at the time of capture. The page title returned by the host is “𝗗𝗔𝗡𝗔 | 𝗖𝘂𝘀𝘁𝗼𝗺𝗲𝗿 𝗖𝗮𝗿𝗲 𝗗𝗔𝗡𝗔”, matching the brand‑targeted claim.
A Gridinsoft trust score of 0 / 100 further corroborates the malicious intent. The domain appears on a single security blocklist and is explicitly listed by PhishDestroy as a blocked resource. VirusTotal analysis shows 14 of 93 scanning engines flag the domain as malicious, reinforcing the suspicion of abuse. The site’s current status is offline, which limits real‑time verification, but the collected artifacts provide sufficient evidence for defensive actions.
Defenders should add the domain and its associated IP address to network‑level deny lists, block resolution of its authoritative nameservers, and monitor for any future re‑use of the same hosting infrastructure. Continuous observation of Cloudflare‑hosted assets related to the same IP range is recommended, as threat actors often recycle these services. Because the site lacks SSL, any attempted HTTP connections can be intercepted and logged for additional intelligence gathering. No further details about the page content are available, so investigations should focus on the infrastructure indicators and the observed brand‑impersonation pattern.
Alur Tanggapan Ancaman Pipeline
Status Daftar Blokir Publik
Analisis VirusTotal
Bukti & Laporan Eksternal
Apakah Anda Terpengaruh oleh Situs Ini?
Jika Anda memasukkan kredensial akun, informasi pribadi atau pembayaran, atau mengunduh file dari domain ini, segera ambil tindakan. Di bawah ini adalah sumber daya untuk membantu Anda melaporkan insiden tersebut dan melindungi diri Anda sendiri.
Laporkan kepada Pihak Berwenang di Daerah Anda
Pilih negara Anda untuk mendapatkan kontak resmi kejahatan dunia maya, atau membuat draf pengaduan →.
Periksa Domain Apa Pun
Analisis ancaman menggunakan daftar blokir yang disimpan, WHOIS, DNS, dan bukti pemindaian publik
Pindai SekarangLaporkan Phishing
Laporkan domain yang mencurigakan ke basis data ancaman kami — lindungi komunitas
LaporanPemberitahuan Ancaman Real-Time
Laporan phishing terbaru dan perubahan ketersediaan yang diamati
PantauTetap Terinformasi, Tetap Aman
Pantau ancaman secara langsung atau ajukan keberatan terhadap daftar ini jika Anda yakin ini merupakan false positive