pusat-bantuan-pengguna-dana[.]mooo[.]com

This domain, pusat-bantuan-pengguna-dana.mooo.com, is identified as a phishing site impersonating DANA, a prominent Indonesian digital wallet service. Analysis indicates the page title explicitly mimics legitimate DANA support portals, suggesting an intent to deceive users into divulging login credentials or financial information. No direct evidence of a crypto drainer kit was observed, but the domain aligns with patterns of credential harvesting campaigns targeting Southeast Asian fintech users. Infrastructure analysis reveals the domain was registered through Porkbun LLC on February 21, 2026, an unusually future-dated creation that may indicate registration system manipulation or data entry error. VirusTotal detection metrics show 13 out of 95 security vendors flagging the domain as malicious. The domain appears on one security blocklist, and no Google Safe Browsing (GSB) entries were recorded at the time of analysis. No associated IP addresses were publicly attributed to this domain in available threat intelligence feeds. The domain has been taken offline, likely following reports to the registrar or hosting provider. Despite its inactive status, residual risk persists due to potential cached DNS entries or delayed user awareness. Users who interacted with the domain prior to takedown are advised to reset credentials for any associated financial accounts and monitor for unauthorized transactions. Organizations are recommended to update blocklists with the domain and its subdomain patterns to prevent future exposure.