aktivasipemuluhanbimamobile[.]netlify[.]app

This domain is flagged as a high-risk phishing site designed to impersonate Bank Bima, a financial institution. The site presents a fraudulent login interface to trick visitors into entering sensitive credentials, such as usernames, passwords, or one-time passcodes. Once submitted, this information is harvested by threat actors for unauthorized account access, financial fraud, or identity theft. Users who interact with this site risk immediate compromise of their banking accounts and personal data. Analysis indicates the domain aktivasipemuluhanbimamobile.netlify.app is actively hosted on Netlify infrastructure and resolves to the IP address 35.157.26.135. It was registered through Netlify and employs a valid SSL certificate issued by DigiCert Inc, which may lend a false sense of legitimacy to unsuspecting users. Security vendors on VirusTotal have flagged this domain, with 15 out of 95 engines detecting it as malicious. The page title explicitly displays 'Bank Bima,' reinforcing its intent to deceive users into believing they are accessing a legitimate banking portal. If a user has visited aktivasipemuluhanbimamobile.netlify.app or entered credentials on the site, immediate action is required. First, disconnect the device from the internet to prevent further data transmission. Next, change the passwords for all accounts accessed from the compromised device, prioritizing financial and email accounts. Enable multi-factor authentication where available. Monitor bank statements and credit reports for unauthorized transactions or signs of identity theft. Report the incident to the legitimate financial institution and relevant cybersecurity authorities. Users should also scan the device for malware using updated security tools to ensure no additional threats are present.