pinjamandenv2[.]inextart[.]biz[.]id

This domain, pinjamandenv2.inextart.biz.id, is under investigation as an active phishing infrastructure targeting loan or financial services, as indicated by its naming pattern and detection status. Analysis on July 29, 2026, reveals the domain is flagged by 17 of 91 security vendors on VirusTotal, a detection rate consistent with known phishing campaigns. It also appears on at least one security blocklist, further supporting its classification as an elevated-risk threat. The domain was blocked by PhishDestroy, though specific detection criteria or timing details are not provided in available intelligence.

Infrastructure analysis indicates the domain is hosted under the inextart.biz.id subdomain, which may share hosting or registrar ties with other malicious or compromised resources. No registrar, IP, or autonomous system details are currently available to assess hosting patterns or geographic concentration. The domain's SSL certificate status and HTTP response codes remain unconfirmed, limiting assessment of operational stability or evasion techniques. The exact content or brand impersonation is not yet analysed, though the 'pinjamandenv2' subdomain suggests a focus on loan or financial fraud, possibly targeting Indonesian-speaking users.

Defenders should treat this domain as active and malicious, prioritising blocking at the DNS or network level. Monitoring for related subdomains or IP associations is recommended, as the parent domain (inextart.biz.id) may serve as a broader phishing hub. Further analysis of page content, redirect chains, or associated malware payloads is needed to determine the full scope of the campaign. No evidence currently links this domain to a specific phishing kit or known threat actor group.