Security Scan Report: pertamina-pemesanan-ia.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 17 IPs in 4 countries across 12 domains to perform 34 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://pertamina-pemesanan-ia.vercel.app/

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Fake DANA/Pertamina 'customer care' page on a vercel.app subdomain, using DANA's own name and metadata while funneling form data to an unrelated external server. Clear brand impersonation and data-exfiltration pattern.

Risk Factors (5)
Impersonation of the DANA brand (official name and meta description) on a domain DANA does not own
Secondary impersonation of Pertamina gas-ordering services
Form data sent cross-origin to an unrelated external domain (demcloud.my.id)
Free/instant shared-hosting subdomain with unverifiable age and no reputation
IDS alerts for abuse of the hosting platform
Domain age information unavailable

Details

Page Title

๐——๐—”๐—ก๐—” | ๐—–๐˜‚๐˜€๐˜๐—ผ๐—บ๐—ฒ๐—ฟ ๐—–๐—ฎ๐—ฟ๐—ฒ ๐——๐—”๐—ก๐—”

Scan Type

public

Domain Name Analysis

Within the application-focused generic top-level domain (.app), 'pertamina-pemesanan-ia.vercel.app' is registered, featuring subdomain 'pertamina-pemesanan-ia'. The registrable portion 'vercel' spans 6 characters split between two vowels and 4 consonants. Splitting it apart reveals two words: ver, cel. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pertamina-pemesanan-ia.vercel.app/

Page Load Overview

2.18s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

๐Ÿ‡ฎ๐Ÿ‡ฉIndonesian
Code: id
Confidence:37%
Script:Unknown
Direction:ltr

Detection Details

Text Length:222 chars
Detector Agreement:60%

Website Classification

Primary Category

finance banking81% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
81%
e-commerce shopping
49%
government public service
45%
news media journalism
35%
adult content
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
264.29.17.195Aws ยท CLOUDUnited States
AS16509Amazon.com, Inc.
2104.18.10.207Cloudflare ยท WAFUnited States
AS13335Cloudflare, Inc.
2104.17.207.5Cloudflare ยท WAFUnited States
AS13335Cloudflare, Inc.
2104.17.24.14Cloudflare ยท WAFUnited States
AS13335Cloudflare, Inc.
2142.251.20.95Google ยท CDNUnited States
AS15169Google LLC
2185.199.109.153Fastly ยท CDNUnited States
AS54113Fastly, Inc.
2192.178.183.132Google ยท CDNUnited States
AS15169Google LLC
2103.150.93.32Bogor, West Java, Indonesia
AS133800PT Biznet Gio Nusantara
2188.114.97.9Cloudflare ยท WAFUnited States
AS13335Cloudflare, Inc.
2104.26.15.37Cloudflare ยท WAFUnited States
AS13335Cloudflare, Inc.
3417--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T113F2C8A1549214073213C5C877A65F8A325A90038A07CC6877FD365EEF8EBBC99B739C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:WG2/5AnEDAFVFmFoFlqcGfFTI5kKbg2TDarXTfdAs6s6s6w++:GoE874OLEfMXXXk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:35311:BLJYWE2AkCHjdAjAIEAAwpgILEShsWhAAiGyACAIyCdAgCDF6GGgUoIAYCDI5CICcASLRUhVaAhkk7iQFTEDRqkQCUCQgEAh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e7f7e7e7ffe7e7
Perceptual Hash:b34c735c33594c6c
Difference Hash:580c044c0c004c4d
Wavelet Hash:00070000073f0707
Color Hash:#763a78

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data