aktifkan-paylatterss[.]meo[.]my[.]id

This technical threat report analyzes the domain aktifkan-paylatterss.meo.my.id, which impersonates the digital wallet brand DANA. The site’s page title, "DANA | #Satu Dompet Untuk Semua Transaksi," falsely claims to be the legitimate DANA platform. The threat posed is an impersonation scam designed to deceive users into providing sensitive financial credentials or personal data under the guise of a trusted payment service.

Technical evidence confirms the malicious nature of this domain. VirusTotal reports detection by 17 out of 95 security vendors, with flags from ADMINUSLabs, Criminal IP, BitDefender, CRDF, and CyRadar. The domain is registered through PT Registrasi Neva Angkasa and was created on 2025-05-08. It resolves to IP address 2606:4700:3035::ac43:c66d, located in the United States and hosted by AS13335 Cloudflare, Inc. The nameservers are mario.ns.cloudflare.com and vita.ns.cloudflare.com. No SSL certificate is present, and GridinSoft assigns a trust score of 0 out of 100.

As of the analysis, the domain is down or offline. The risk level is high due to the combination of widespread vendor flags, impersonation of a major brand, and zero trust rating. Users should avoid any interaction with this domain.