danaa-dompett-digitall.ukw.my.id
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Description of danaa-dompett-digitall.ukw.my.id
The domain danaa-dompett-digitall.ukw.my.id appears to present itself as a page related to DANA, an Indonesian digital wallet and financial transaction platform. Its page title and meta description reference digital payments, money transfers, QR payments, and account-related actions, while the screenshot shows branding and interface elements associated with a mobile wallet service.
However, the domain name itself does not appear to match the official naming pattern one would typically expect for a major financial platform. Instead, it uses a longer subdomain-style structure with altered spellings such as "danaa," "dompett," and "digitall," which may indicate an attempt to imitate a recognizable payment brand rather than an official corporate web property.
Based on the visible content, the site appears to target Indonesian-speaking users and may be attempting to attract visitors seeking account support or payment-related services. Because it references financial account actions such as activation, account repair, and account deletion, it would likely be categorized as a finance-related website, though its presentation raises authenticity concerns.
Safety Assessment for danaa-dompett-digitall.ukw.my.id
This website shows several notable risk indicators at the time of this scan. Most importantly, it was flagged by 16 out of 91 security engines, with many of those detections classifying it as phishing or otherwise malicious. The page content also appears to imitate the DANA digital wallet brand, and the domain closely resembles that branding while using altered spellings and an unrelated host structure, which may indicate a look-alike site intended to mislead visitors.
Although the malware scan summary did not identify flagged files and several major threat databases were clean at the time of this scan, those signals are outweighed here by the multi-engine phishing consensus and the visual evidence of brand imitation on a finance-themed page. In addition, the domain's IP address is listed on one mail-reputation blocklist, which is a weaker signal on its own but still adds a small amount of caution.
Because this page appears to request or facilitate sensitive account-related actions under the branding of a known payment service, any interaction with it could carry elevated risk, especially if credentials, phone numbers, or payment details are requested. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site uses a valid SSL/TLS certificate issued by Google Trust Services and is served through Cloudflare infrastructure on IP address 104.21.91.247. Its nameservers are also on Cloudflare, suggesting the domain is using a reverse-proxy/CDN setup that can mask origin hosting details. DNSSEC appears to be unsigned, which is not uncommon but does mean DNS responses do not benefit from that additional integrity layer.
From a technical scanning perspective, only two files were examined and no malicious files, external links, or iframes were identified in that limited snapshot. Even so, the stronger concern here is not server misconfiguration but the apparent impersonation of a financial brand combined with broad phishing detections from multiple security engines.
Share your experience with this website. Was it safe? Did you encounter any issues?