Security Scan Report: aktiffkan-paylater-sekarang.netlify.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 3 countries across 10 domains to perform 17 HTTP transactions. The main domain is netlify.app and was registered 8 years ago.

Submitted URL: https://aktiffkan-paylater-sekarang.netlify.app/

AI Security Verdict

High Risk

Confidence: 72%

7
Risk Score

Unauthorised page impersonating Indonesian e-wallet DANA on a free netlify subdomain with 'activate paylater now' lure and fake official branding; no input fields captured, but treat as phishing.

Risk Factors (4)
Impersonation of a financial brand (DANA) on a non-official domain
Deceptive hostname crafted to resemble a DANA account-activation prompt
Free hosting subdomain with no verifiable creation date or reputation
Brand-styled action buttons directing users to 'activate' financial services
Domain age information unavailable

Details

Page Title

DANA - Apa pun transaksinya selalu ada DANA

Scan Type

public

Domain Name Analysis

The domain name 'aktiffkan-paylater-sekarang.netlify.app' uses the application-focused generic top-level domain (.app) with subdomain 'aktiffkan-paylater-sekarang'. Count 7 characters in 'netlify' containing two vowels alongside five consonants. It segments into three words: net, li, fy. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://aktiffkan-paylater-sekarang.netlify.app/

Page Load Overview

1.41s
Total Load Time
2.3 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:50%
Script:Unknown
Direction:ltr

Detection Details

Text Length:255 chars
Detector Agreement:100%

Website Classification

Primary Category

finance banking62% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
62%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
263.176.8.218Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1172.217.208.95Google · CDNUnited States
AS15169Google LLC
1185.199.108.153Fastly · CDNUnited States
AS54113Fastly, Inc.
12.19.122.216Akamai · CDNDüsseldorf, North Rhine-Westphalia, Germany
AS20940Akamai International B.V.
1104.26.14.133Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.110.132Google · CDNUnited States
AS15169Google LLC
135.157.26.135Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
174.125.29.95Google · CDNUnited States
AS15169Google LLC
1716--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EA7186E3E94494090310CB509DEBF108D47BCA2ACB61F47BEAD60586A6E0BD242F3B75

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:+rruSFreS/I00Y3rrS8SZrlPY3sY3kXY3kAHSbIbvjX1T:yrxFl/Ib6GvZxPHlXleDz5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3517:IACCEAAAgAIEAQgQBgQAQEgCAQEAgUBAERAJABUAAgAiAAEACIABAAAAwAIIgLAIQCYFAAAAiEACACEABAABCgIQIAwIBICa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00001e3f07ffffff
Perceptual Hash:a34979670ca3dc66
Difference Hash:e2d2f4ecefcecece
Wavelet Hash:00001c0703ffffff
Color Hash:#6d2d86

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data