aktifkaanpaylatters4[.]yzeb[.]my[.]id

This domain, aktifkaanpaylatters4.yzeb.my.id, is flagged as a high-risk generic phishing site targeting users of the DANA digital payment platform. Analysis of the page title, 'DANA - Apa pun transaksinya selalu ada DANA,' confirms the domain is designed to mimic the legitimate DANA service, likely to harvest user credentials or payment details. No specific drainer kit signatures were identified, but the domain exhibits typical phishing infrastructure characteristics, including the use of Cloudflare for hosting and obfuscation. Technical indicators reveal the domain resolves to IP address 172.67.164.83, hosted on Cloudflare's network (AS13335). VirusTotal detection shows 21 out of 95 security vendors have flagged this domain as malicious. The SSL certificate is issued by Google Trust Services (WE1), a common tactic to lend false legitimacy. The domain appears on at least one security blocklist, and its infrastructure is consistent with known phishing campaigns targeting Southeast Asian financial services. No registrar or creation date data was provided, but the use of a subdomain under my.id suggests potential abuse of a compromised or low-cost hosting provider. As of the latest verification, aktifkaanpaylatters4.yzeb.my.id remains active and continues to pose a significant threat to users. Response actions should include immediate blacklisting of the domain and IP in enterprise security tools, as well as monitoring for related infrastructure (e.g., sibling domains or IPs). Users who may have interacted with this domain should be advised to reset credentials and review transaction histories for unauthorized activity. The remaining risk is elevated due to the domain's active status and the targeted nature of the phishing campaign.