ScanMalware.com

Security Scan Report: gentacart.my.id

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1f100858-4483-4ab9-8faa-08f25672e7f4Domain and IP registration (RDAP)/api/v1/rdap/1f100858-4483-4ab9-8faa-08f25672e7f4How often this domain was scanned/api/v1/domain/stats/gentacart.my.idScan history for this domain/api/v1/domain/history/gentacart.my.id?limit=15
This website contacted 17 IPs in 2 countries across 8 domains to perform 31 HTTP transactions. The main domain is gentacart.my.id and was registered 2 years 6 months ago.

Submitted URL: https://gentacart.my.id

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Genuine Gentacart storefront that appears compromised: an injected ClickFix/EtherHiding loader shows a fake Cloudflare 'Human Verification' overlay telling Windows visitors to open Terminal and paste commands — a critical malware-distribution page.

Risk Factors (5)
Injected ClickFix fake 'Human Verification' / Cloudflare-style overlay instructing visitors to open Terminal and paste clipboard commands
EtherHiding: next-stage payload address loaded from a Polygon smart contract
Obfuscated script concealing known-malicious RPC hosts
CRITICAL IDS malware alert indicative of network trojan / data exfiltration
Threat-intel corroborated malicious third-party script domains (cloud-browse.codes, quiknode RPC endpoint)
Domain age information unavailable

Details

Page Title

Gentacart- Toko Online di android dan web

Scan Type

public

Domain Name Analysis

Domain 'gentacart.my.id' uses the Indonesian country-code top-level domain (.my.id). The registrable portion 'gentacart' spans 9 characters containing three vowels alongside six consonants. It segments into three words: gent, a, cart. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://gentacart.my.id

Page Load Overview

2.26s
Total Load Time
524 KB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:46%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,134 chars
Detector Agreement:100%
Language mismatch: Declared as en-US but detected as id

Website Classification

Primary Category

e-commerce shopping91% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
91%
technology software
80%
government public service
76%
corporate business
57%
finance banking
54%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15104.21.91.210Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.13.97Google · CDNUnited States
AS15169Google LLC
1151.101.1.229Fastly · CDNUnited States
AS54113Fastly, Inc.
1150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
1216.239.34.36Google · CDNUnited States
AS15169Google LLC
1142.251.127.154Google · CDNUnited States
AS15169Google LLC
1142.251.151.119Google · CDNUnited States
AS15169Google LLC
1142.251.110.148Google · CDNUnited States
AS15169Google LLC
1178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
3117--

Detected Technologies14

WordPressv7.1.3
100%
MetaGenerator
100%
JQueryv3.7.1
100%
Google-AnalyticsvUniversal
100%
Cloudflare Bot Management
70%
WooCommercev10.9.4
60%
PHP
50%
MySQL
50%
HTTP/3
40%
Cloudflare
40%
Google Analytics
35%
jsDelivr
20%
jQuery Migrate
20%
Site Kitv1.190.0
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T129830933D298143E662B8FDE9161732E307DD185EE02166CF0F563378BAAE96257271C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:hYyypokAMayAqA3EO+o163E2wdwAMJV6sgcUvAmuy8QRXKYmA:hYrekAM1AqA3UAMJV6sgJvAmuRQ1KYD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:82045:ACWBg2AgCUGVQgFaGKjIgkaJDHaKgjIoSBzVCAMgh5DDgAGFgoEJUCECCUSAAIBWB0Ixwh/pggRICgeBQVKKCq0CtDDCYAXN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcfc3c3ffffffff
Perceptual Hash:b03193c7c6ccccce
Difference Hash:1818163600000008
Wavelet Hash:3f0703030000ff00
Color Hash:#1f5393

Other Hashes

Crop Resistant:1818163600000008

Scan History

Scan history not available

Unable to load historical scan data