Security Scan Report: pengirimanbarangjogja.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 3 countries across 7 domains to perform 74 HTTP transactions. The main domain is pengirimanbarangjogja.com and was registered 12 years ago.

Submitted URL: https://pengirimanbarangjogja.com

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Legitimate Indonesian freight company site, but it is flagged as ClearFake and shows CRITICAL EtherHiding malware alerts plus blockchain C2 domains — likely compromised to serve malicious payloads. Avoid.

Risk Factors (5)
Primary domain reported as ClearFake malware infrastructure
Malicious third-party script host interseq.at loaded by the page (multi-feed corroborated)
CRITICAL IDS EtherHiding exfiltration alerts
Blockchain RPC domains contacted in DNS/SNI consistent with EtherHiding C2
Pattern matches a compromised legitimate site used to deliver ClearFake/fake-update payloads
Domain age information unavailable

Details

Page Title

Jasa Pengiriman Barang Jogja, Ekspedisi Antar Kota Provinsi

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'pengirimanbarangjogja.com' is registered. Its registrable label 'pengirimanbarangjogja' stretches across 21 characters split between 8 vowels and 13 consonants. Word splitting yields 8 words: pen, giri, man, baran, g, jog, j, a. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Pengiriman Bara Jasa Pengiriman Barang Jogja Solusi Pengiriman Antar Kota & Antar Provinsi Antar Kota : Jakarta - Bandung — Bogor — Semarang - Solo ~ Yogyakarta — Surabaya - Banyuwangi - Denpasar,...

Page Load Overview

5.14s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:id
Text Length:6,830 chars
Detector Agreement:100%

Website Classification

Primary Category

gambling betting85% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
85%
education learning
83%
news media journalism
82%
adult content
81%
finance banking
81%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1045.143.81.172Singapore, Singapore
AS47583Hostinger International Limited
8142.251.20.95Google · CDNUnited States
AS15169Google LLC
8172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8172.67.130.228Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8103.30.147.84Indonesia
AS46050PT JC Indonesia
8104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
835.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
749--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F183B67239851C2A214F16CFD0C7B62D51C79A9ADB03D9E9B3FE02A89BF9CD07197118

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:X4apJQmeaL6QAri3WXATCpAFC6vPkZXvcqcnsoDu1OSsL5:X3/QmWApC6vPk1vcqcnsoDu1OSsL5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:87469:cGYRQHAAoshwCRKwDwEgBBAa0IQYkViuBLqCE1MVGMEC7IWCVsxsTgDEVAihEGlhMChAMg7DQODMgpjiKESQ6SLkYEsEQAAg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00000000ffffff
Perceptual Hash:9c0ef5abdce9d008
Difference Hash:2674343070cd0c28
Wavelet Hash:ff00000000ffffff
Color Hash:06c00000000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data