dambilua[.]id[.]vn

dambilua.id.vn is a high-risk phishing domain that was used to conduct malicious activities. The domain is not associated with any specific brand or drainer kit, but it poses a significant threat to users who may encounter it. The primary purpose of this domain was to trick users into providing sensitive information.

Infrastructure analysis reveals that dambilua.id.vn has been flagged by 19 out of 95 security vendors on VirusTotal, indicating a notable level of suspicion. The domain resolves to the IP address 210.211.125.205, which is located in Vietnam and is registered to Viettel - CHT Company Ltd. The domain was created on April 08, 2026. Google Safe Browsing has also flagged this domain as a phishing site, and it appears on one security blocklist. The domain is currently marked as taken offline.

The domain dambilua.id.vn is currently offline, and appropriate response actions have been taken to mitigate the immediate threat. However, the infrastructure used by this domain may still pose a risk, as the IP address 210.211.125.205 remains active and could be repurposed for future attacks. Users are advised to avoid interacting with any links or content related to this domain and to monitor their accounts for any unauthorized activity. Security teams should continue to monitor the IP address for any signs of resurgence and ensure that network defenses are updated to block any related malicious traffic.