dana-id[.]lyanann[.]my[.]id

The domain dana-id.lyanann.my.id was identified as a brand impersonation threat targeting DANA, a popular Indonesian digital wallet service. It is currently offline, but while active it posed an elevated risk to users who might have mistaken it for the legitimate DANA platform. The domain's title, "DANA - Apa pun transaksinya selalu ada DANA," closely mimics official branding to deceive visitors into entering sensitive information.

Technical analysis reveals that this domain was flagged by 12 out of 95 VirusTotal security vendors, indicating broad consensus on its malicious nature. It was registered on February 21, 2026, through PT Web Media Technology Indonesia, and resolved to IP address 172.67.160.201. The domain appeared on at least one security blocklist and lacked an SSL certificate, further undermining its legitimacy. These indicators collectively point to a sophisticated phishing operation designed to harvest credentials or financial data from unsuspecting users.

Although the domain has been taken offline, users who may have interacted with it should remain vigilant. PhishDestroy recommends monitoring financial accounts for unauthorized activity, changing passwords on the legitimate DANA platform, and enabling two-factor authentication if available. Avoid clicking on links from unsolicited messages or emails that direct to unfamiliar domains, and always verify the URL before entering any personal information. If you suspect your data was compromised, contact DANA's official support immediately.