pemulihan-dana[.]idco[.]biz[.]id

The domain pemulihan-dana.idco.biz.id is currently flagged as a generic phishing site with an elevated risk rating. Infrastructure analysis shows that the domain resolves to the IPv4 address 188.114.97.3, which is the sole hosting endpoint observed. No nameserver records were returned, indicating that the authoritative DNS configuration is either hidden or misconfigured, a tactic often used to impede attribution. VirusTotal scans have returned detections from 17 out of 91 security vendors, providing independent confirmation that the domain is associated with malicious activity.

The domain is listed on a single external security blocklist and is actively blocked by the PhishDestroy feed, suggesting that at least one reputable anti‑phishing consortium has taken remediation steps. No additional data such as registrar information, SSL certificate details, HTTP response codes, page title, or Safe Browsing verdicts are available, leaving the content and exact phishing campaign tactics unverified. Defenders should prioritize blocking the domain at the network perimeter and updating endpoint protection rules to include the observed IP address.

Continuous monitoring of the IP reputation and any emerging detections from additional scanning services is advised. Where possible, threat‑intel platforms should be queried for new indicators of compromise linked to 188.114.97.3, and any internal logs showing connections to this address should be investigated for potential credential harvesting attempts. Given the limited visibility into the payload, organizations should also educate users about unsolicited communications that reference the domain, reinforcing the need to verify URLs before entering credentials.