ScanMalware.com

Security Scan Report: ora78jagoan.com

Site favicon
Submitted: Jan 29, 2026, 3:04:40 AMCompleted: Jan 29, 2026, 3:06:09 AMpubliccompleted
Loading additional data...

Summary

This website contacted 13 IPs in 2 countries across 13 domains to perform 1 HTTP transaction. The main domain is ora78jagoan.com and was registered NaN years ago.

Submitted URL: https://ora78jagoan.com/promotion

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Confirmed phishing scam; do not provide credentials or personal data.

Risk Factors
Brand‑new domain (<7 days) with credential‑harvesting form
Unranked, low‑reputation domain
Meta tags claim official status on a newly registered domain
Password field present without any legitimate justification
Domain age information unavailable

Details

Page Title

ORA78 | Daftar Promosi dari ORA78

Scan Type

public

Language

🇮🇩

ID

(80% confidence)

Category

gambling betting

(40%)

Domain Information

Within the commercial generic top-level domain (.com), 'ora78jagoan.com' is registered without a subdomain. The core label 'ora78jagoan' covers 11 characters containing 5 vowels alongside 4 consonants, notching 2 digits. It segments into six words: or, a, 78, j, ago, an. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ora78jagoan.com/promotion

Page Load Overview

11.18s
Total Load Time
127
HTTP Requests
20
Domains
7.9 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:id
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:id
Text Length:6,172 chars
Detector Agreement:80%

Website Classification

Primary Category

gambling betting40% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
40%
entertainment media
36%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19104.17.24.14United States
AS13335Cloudflare, Inc.
923.36.162.85Germany
AS32934Facebook, Inc.
934.160.81.0Kansas City, Missouri, United States
AS396982Google LLC
9172.67.74.140Unknown
AS396982Google LLC
9157.240.0.6Unknown
AS13335Cloudflare, Inc.
9142.251.141.106UnknownUnknown
923.36.162.17UnknownUnknown
923.36.162.25UnknownUnknown
9188.114.97.3United States
AS13335Cloudflare, Inc.
9151.101.65.229UnknownUnknown
12713--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F3645FF15684642B372706D5F8ABB74CE05E5A0AFD6A88C4F55C86386BC7ED608732F0

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:C5AILl9dKGxLlUL/pnF59d85kxvNquMDbgVzJpN:KBxLlUL/pn/rxvNquMDbkzJpN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:328027:gBWYQAJCAhlowGDEQrMAlMMBChCBAHyYImBAMGljABJvCjLEKIZ4BhYCgxIwAuBcHKIR2Y7yEAYOMIEEhAQSUoDRCAFGEQKD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:4e007e3c7c7e3a3c
Perceptual Hash:823c3bf59be4c093
Difference Hash:9891c4e0d8c4eaf8
Wavelet Hash:4e007e3c3c7e3a3c
Color Hash:#c587ae

Other Hashes

Crop Resistant:258597333199918f,d3ded8d99890b085,bcb632a4e767624e,aeaee9f4cbc91918,9891c4e0d8c4eaf8

Scan History

Scan history not available

Unable to load historical scan data