If you've come across mobile-bimaaktivasi-pemulihan.edgeone.dev and wondered whether it's a legitimate Bank Bima or Bank Jateng portal, you need to know the truth before typing in any login details. This website looks like a banking activation page — it asks for your MPIN, the last 4 digits of your ATM card, and an OTP code sent via SMS or WhatsApp. That alone should raise your guard. Real banks do not host their authentication pages on obscure 'dev' domains without any company name, privacy policy, or terms of service. This site has zero legal pages, zero contact information, and zero web history — the Wayback Machine has never seen it before, which means it's very new. A legitimate financial app would have a track record, official app store links, and clear branding tied to a known legal entity. Instead, this page hides everything behind a login screen. The presence of a valid HTTPS certificate is not enough to make a phishing site safe — scammers buy those too. The smartest thing you can do is close this tab and access your Bank Jateng account only through the official Bima mobile app downloaded from your phone's official app store. If someone sent you a link to this page, treat it as a phishing attempt: do not enter your MPIN, do not enter your card details, and do not forward the link to anyone else.
No — mobile-bimaaktivasi-pemulihan.edgeone.dev doesn't look safe
In plain English
This site is not Bank Bima or Bank Jateng. It's a login page that asks for your MPIN, ATM card digits, and OTP codes but hides every trace of who runs it. Legitimate banking apps have legal pages, contact info, and a verifiable domain history — this has none of those. Do not enter any credentials or personal data here.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
SSL setup is decent — HTTPS with a valid certificate from a trusted issuer — but the server still accepts outdated TLS 1.0 and 1.1, and the site lacks basic browser protections like anti-clickjacking headers. For login pages, that's below the current security baseline but not yet dangerous.
There is practically no identity here. The domain is on a 'dev' TLD with no WHOIS available, no about page, no team, and no business entity disclosed. A site that asks for MPINs and bank login credentials but hides its ownership is a serious red flag.
The domain is brand new — no history in the Wayback Machine, no social media footprint, no Trustpilot reviews, and not in any traffic rankings. While a clean blacklist status is positive, the complete absence of a track record is concerning for something that pretends to be a banking app.
This site provides zero transparency. No contact information, no physical address, no about page, no social media links. For a page that looks like a bank's login and activation portal, this is deeply unusual and alarming. Legitimate financial services prominently display their identity.
There is no privacy policy, no terms of service, and no legal disclosures whatsoever. In Indonesia, where this site targets users, financial services are required to have clear privacy notices and terms. This site has none, which strongly suggests it is not a real bank service.
The site loads fast and uses modern TLS, but the infrastructure is bare-bones: no email setup, no security headers, no DNSSEC, no sitemap, no robots.txt. The hosting is on an Asian provider, which is plausible for an Indonesia-targeted service, but the overall setup lacks the depth you'd expect from a real bank.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.