ambil[.]hadiahnya[.]mooo[.]com

This domain, ambil.hadiahnya.mooo.com, poses a brand impersonation threat targeting users of DANA, an Indonesian digital payment platform. The site displays a fraudulent giveaway page titled 'DANA Giveaway Indonesia,' designed to deceive visitors into entering sensitive credentials or financial information under the pretense of a legitimate promotion. Analysis indicates the domain is structured to exploit trust in the DANA brand, likely aiming to harvest login details, payment data, or personal information for malicious use. Infrastructure analysis reveals multiple technical indicators confirming the domain's malicious nature. The domain is flagged by 11 out of 95 security vendors on VirusTotal, indicating broad recognition of its fraudulent intent. It was registered on February 21, 2026, through Porkbun LLC, a registrar commonly associated with low-cost domain registrations favored by threat actors. The domain appears on one security blocklist and resolves to the IP address 148.113.46.149, hosted on OVH SAS infrastructure in India. The SSL certificate is issued by an entity linked to automated phishing toolkits, further corroborating its illegitimate purpose. Users who visited ambil.hadiahnya.mooo.com should take immediate action to mitigate potential risks. If any credentials or payment information were entered, affected individuals must change passwords for all associated accounts, particularly DANA and any linked financial services. Enable multi-factor authentication where available to add an additional security layer. Monitor financial statements for unauthorized transactions and report suspicious activity to the relevant financial institution. Additionally, scan devices for malware using updated security tools to ensure no secondary infections were introduced. Awareness of such scams and verification of domain legitimacy before entering sensitive data are critical preventive measures.