indonesia-dana-layannm[.]conflict[.]my[.]id

This domain, indonesia-dana-layannm.conflict.my.id, was designed to impersonate a legitimate service related to the Indonesian digital wallet platform DANA. The page title, rendered in Unicode characters, suggests it is a phishing page aimed at stealing login credentials or personal information from users. The use of "layannm" (likely a misspelling of "layanan", meaning service in Indonesian) indicates the site masquerades as an official customer service portal. Such threats are common in the financial sector, where attackers trick victims into entering sensitive data under the guise of account verification or support.

PhishDestroy has identified this domain through multiple threat intelligence sources. It appears on one security blocklist and was created on April 24, 2026, which is unusually recent. The domain resolves to IP address 172.67.137.33, and its SSL certificate is issued by Let's Encrypt with serial E7, a common choice for phishing sites due to its free and automated nature. VirusTotal analysis shows that 21 out of 95 security vendors flag this domain as malicious, indicating strong consensus among cybersecurity tools. The domain is currently offline, but it may have been active temporarily to harvest data.

If you have visited this domain or entered any information, take immediate action. Change passwords for any accounts that may be compromised, especially your DANA wallet and associated email. Enable two-factor authentication on all financial services. Monitor your accounts for unauthorized transactions and report any suspicious activity to your bank or the official DANA support team. Run a full antivirus scan on your device to check for malware. Remember, legitimate companies never ask for sensitive information through unsolicited links. Stay vigilant and verify URLs before entering personal data.