brndnsia[.]com

This domain, brndnsia.com, is identified as a high-risk credential theft operation specifically targeting customers of Bank BRI, an Indonesian financial institution. The site presents itself as a legitimate Bank BRI 2025 promotional platform offering coupons or undian (lottery), a common social engineering tactic to lure victims into entering sensitive banking credentials, personal identification details, or one-time passwords (OTPs). Analysis indicates the domain is designed to harvest login credentials, which could lead to unauthorized account access, financial fraud, or identity theft. The use of Bank BRI branding, including its logo and promotional language, increases the likelihood of successful deception among Indonesian users familiar with the bank’s legitimate campaigns. Infrastructure analysis reveals multiple technical indicators supporting the malicious classification of brndnsia.com. The domain was registered on February 21, 2026, through CV. Rumahweb Indonesia, a registrar frequently associated with recently established phishing domains. It resolves to the IP address 103.30.147.20, hosted under AS46050 (PT JC Indonesia), an autonomous system previously linked to other fraudulent activities. The domain lacks an SSL certificate, a red flag for users accustomed to secure banking sites. Detection metrics further confirm its malicious nature: VirusTotal reports 18 out of 95 security vendors flagging the domain as malicious, while Google Safe Browsing explicitly classifies it as phishing. Additionally, the domain appears on one security blocklist and is actively blocked by at least one anti-phishing service, reinforcing its high-risk status. Users who have visited brndnsia.com or interacted with its content should take immediate remedial actions to mitigate potential risks. First, any credentials entered on the site must be considered compromised and should be changed immediately across all platforms where the same or similar passwords were used. Affected individuals should contact Bank BRI through official channels to report the incident and monitor their accounts for unauthorized transactions. Enabling multi-factor authentication (MFA) on all financial and sensitive accounts is strongly recommended to prevent further unauthorized access. Users are also advised to scan their devices for malware, as phishing sites may deploy additional payloads or redirect to malicious downloads. Finally, reporting the domain to local cybersecurity authorities or consumer protection agencies can aid in broader mitigation efforts and prevent further victimization.