pakaidannaaa[.]idnesst[.]my[.]id

Analysis of the domain pakaidannaaa.idnesst.my.id indicates a phishing site impersonating DANA, a digital payment service, based on the page title 'DANA | Customer Care DANA' observed in the supplied evidence. The domain was registered on February 21, 2026, and is currently offline as of July 23, 2026. Infrastructure analysis reveals the domain resolved to IP address 172.67.175.4, hosted on Cloudflare's network (AS13335). The SSL certificate is issued by WE1, a provider commonly used for both legitimate and malicious sites, offering no definitive classification on its own.

Detection data shows the domain appears on one security blocklist and is flagged by PhishDestroy. VirusTotal reports 14 of 93 security vendors marking the domain as malicious, though this does not constitute full consensus. The domain's hosting on Cloudflare, a provider frequently used to mask origin infrastructure, aligns with common phishing tactics to evade IP-based blocking. No additional details about the phishing kit, redirect chains, or specific lures are available from the provided evidence.

Defenders should treat this domain as a confirmed phishing threat targeting DANA users. Recommended actions include blocking the domain and its associated IP (172.67.175.4) at perimeter security controls, monitoring for internal connections to this infrastructure, and alerting users to potential credential theft risks. The domain's current offline status does not preclude future reactivation, warranting continued monitoring. No further content analysis (e.g., page structure, scripts, or exfiltration endpoints) is available from the supplied data.