898a8[.]com

PhishDestroy has identified 898a8.com as a generic phishing threat. The domain, registered on August 30, 2024, through GoDaddy.com, LLC, was found to host a fraudulent page titled "Bergabunglah dalam 898 A!" which likely aims to deceive Indonesian-speaking users into divulging sensitive information. No specific brand impersonation or drainer kit was identified, but the site's behavior aligns with credential harvesting tactics common in phishing campaigns.

Technical indicators paint a clear picture of risk. VirusTotal analysis shows 5 out of 95 security vendors flagging this domain, confirming malicious consensus. The domain resolves to IP address 65.9.175.81 and currently appears on one security blocklist. Despite being offline at the time of analysis, its SSL certificate (Amazon RSA 2048 M04) was valid, and Google Safe Browsing may have previously flagged it. The combination of recent registration and blocklist presence signals a coordinated threat.

As of now, 898a8.com has been taken offline, likely due to takedown actions by authorities or hosting providers. However, residual risk remains as similar domains may appear under different names. PhishDestroy recommends users avoid any interaction with this domain and verify suspicious links through our platform. Stay vigilant against phishing attempts posing as Indonesian services or promotions.