ScanMalware.com

Security Scan Report: dana-id.my.id

Redirected to:
https://dana-id.my.id/
Submitted: Jul 15, 2026, 2:38:50 PMCompleted: Jul 15, 2026, 2:40:09 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 3 domains to perform 2 HTTP transactions. The main domain is dana-id.my.id and was registered NaN years ago.

Submitted URL: http://dana-id.my.id/

Effective URL: https://dana-id.my.id/Redirected

AI Security Verdict

Moderate Risk

Confidence: 85%

5
Risk Score

The site impersonates the DANA brand on a brand‑new, unranked domain and sends data to a Telegram bot, indicating a high‑risk phishing attempt.

Risk Factors
Newly registered domain (<7 days) with brand impersonation
Unranked / low reputation domain
Cross‑origin request to Telegram bot endpoint
Safety Factors
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 8 to 5
Domain age information unavailable

Details

Page Title

DANA

Scan Type

public

Language

🇮🇩

ID

(80% confidence)

Category

finance banking

(48%)

Domain Information

You're looking at domain 'dana-id.my.id' on the Indonesian country-code top-level domain (.my.id) while skipping any subdomain. The registrable portion 'dana-id' spans 7 characters with three vowels and three consonants, notching one hyphen. Splitting it apart reveals two words: dana, id. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://dana-id.my.id/

Page Load Overview

0.80s
Total Load Time
13
HTTP Requests
4
Domains
200 KB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:id
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:id
Text Length:901 chars
Detector Agreement:67%

Website Classification

Primary Category

finance banking48% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

finance banking
48%
government public service
35%
gambling betting
35%
phishing scam
33%
adult content
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5216.198.79.65United States
AS16509Amazon.com, Inc.
423.185.0.4United States
AS54113Fastly, Inc.
4172.217.208.95Google · CDNUnited States
AS15169Google LLC
133--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A783AFB05190A932A0A3C89635D61F8E3174C507D84B9948FFAEA5F2CFD3DA3452B2DD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:iIh0k/zhqzZUl3h0k/zhqzZUlbh0k/zhqzZUl8H:th0k/zhqzql3h0k/zhqzqlbh0k/zhqzF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:81389:CAFZi1kgKEkAQAAJnugESwKgBJAUChjsYm7AAAGjEM4iquKGgCKQsj2KFiilCG6zgEBggIijERjWIlaDAHCQgIAAEyIRDbYU

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818181818181818
Perceptual Hash:8873cc7326738c73
Difference Hash:b3b3b3b3b3b3b3b3
Wavelet Hash:1919191919191919
Color Hash:#c5878e

Other Hashes

Crop Resistant:4848aaa0eca8a2a0,e4a6dcd9a2808cb2,b3b3b3b3b3b3b3b3

Scan History

Scan history not available

Unable to load historical scan data