danaid[.]7xb[.]web[.]id

The domain danaid.7xb.web.id is currently active and assigned an elevated risk rating as of the report date 29 July 2026. Infrastructure analysis shows that the domain resolves to the IPv4 address 51.79.157.177. The authoritative name servers are ns1.blackdragonesia.my.id and ns2.blackdragonesia.my.id, indicating that the domain is hosted within the BlackDragonIndonesia DNS namespace.

The domain has been flagged by the PhishDestroy blocklist and appears on one additional security blocklist, confirming that it is being actively monitored by threat‑intelligence providers. VirusTotal scans have recorded 19 detections out of 91 security vendors, providing a quantitative indication of malicious behavior observed by multiple antivirus and URL‑reputation engines. No further public data such as SSL certificate details, HTTP response codes, Safe Browsing status, or page title have been released, so the exact content and phishing kit employed remain unknown.

Analysts should consider the domain hostile and enforce blocking at network perimeter and DNS filtering layers. Monitoring of the associated IP address and its surrounding address space is advised, as additional phishing‑related resources may be co‑hosted. Defensive actions include adding the domain and IP to local deny lists, sharing the indicator of compromise with upstream security services, and maintaining vigilance for any future activity linked to the BlackDragonIndonesia name servers.