Security Scan: Koko Indonesia

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/699d473b-8f79-48e1-aabe-ff601e86b5ec Domain and IP registration (RDAP)/api/v1/rdap/699d473b-8f79-48e1-aabe-ff601e86b5ecHow often this domain was scanned/api/v1/domain/stats/kokoindonesia.com Scan history for this domain/api/v1/domain/history/kokoindonesia.com?limit=15

This website contacted 4 IPs in 3 countries across 4 domains to perform 33 HTTP transactions. The main domain is kokoindonesia.com and was registered 11 years ago.

Submitted URL: https://kokoindonesia.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate-looking 11-year-old WooCommerce store that has been compromised: a Macfinger ClickFix/AMOS stealer loader (CRITICAL YARA + vetted kit roster + CRITICAL IDS alert) is injected and beacons to poalmcreorvelvet.pro. Do not browse or click.

Risk Factors (5)

Critical-severity YARA match for Macfinger ClickFix (AMOS stealer) loader on the page

Two analyst-vetted known malicious kit identifications (shared loader and per-site first stage)

Critical network IDS alert for ET MALWARE AMOS ClickFix Campaign loader script request

Unranked cross-origin script/beacon host poalmcreorvelvet.pro contacted from page scripts

Site appears compromised — legitimate WooCommerce content alongside injected stealer script

Domain age information unavailable

Details

Page Title

Koko Indonesia

Scan Type

public

Favicon Hash

MMH3: -2111686476

MD5: 39782581e23549d9f120d47dc146034a

Domain Name Analysis

The domain name 'kokoindonesia.com' uses the commercial generic top-level domain (.com). The registrable portion 'kokoindonesia' spans 13 characters holding seven vowels versus six consonants. Splitting it apart reveals two words: koko, indonesia. Expect 6.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.58s

Total Load Time

536 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:45%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:id

Text Length:1,220 chars

Detector Agreement:67%

Language mismatch: Declared as id but detected as en

Website Classification

Primary Category

e-commerce shopping70% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

e-commerce shopping

70%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	194.163.41.98	Singapore, Singapore	AS47583Hostinger International Limited
8	142.250.154.95Google · CDN	United States	AS15169Google LLC
8	193.29.224.97	Helsinki, Uusimaa, Finland	AS210644Aeza Group LLC
8	142.251.14.94Google · CDN	United States	AS15169Google LLC
33	4	-	-