Security Report: lk21.living - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/73b1a4e4-e9bf-4412-9850-3772694032a1 Domain and IP registration (RDAP)/api/v1/rdap/73b1a4e4-e9bf-4412-9850-3772694032a1 Certificate Transparency/api/v1/ct/lk21.living How often this domain was scanned/api/v1/domain/stats/lk21.living Scan history for this domain/api/v1/domain/history/lk21.living?limit=15

This website contacted 36 IPs in 4 countries across 24 domains to perform 189 HTTP transactions. The main domain is lk21.living and was registered 17 years ago.

Submitted URL: https://lk21.living/

AI Security Verdict

Moderate Risk

Confidence: 62%

Risk Score

Self-branded Indonesian movie piracy/streaming portal on a 49-day-old unranked domain. No credential, payment, or malware indicators — risk limited to unlicensed content, new domain, and sketchy link network.

Risk Factors

Very new domain (49 days old) with no established reputation

Operates as an unlicensed piracy/streaming portal distributing copyrighted films

Outbound links to other file-sharing/piracy-adjacent domains (duniafilm.cfd, duniafilm.xyz, film21.bar, filmsemi.lol, syair.pro subdomains)

Hosts adult/explicit content listings alongside general films

Use of Function() constructor code-generation calls (suspicious but not corroborated)

Associated with a .cfd TLD DNS query flagged in IDS telemetry

Safety Factors

No brand impersonation — the domain, title, and meta tags all reference the site's own brand (lk21)

No credential-harvesting, login, or payment forms detected

No Indicators of Compromise, YARA malware, or Safe Browsing threats

Cross-origin credential exfiltration not detected; form actions point to its own domain

IDS alerts are informational heuristics, not confirmed phishing or malware

Domain age information unavailable

Details

Page Title

lk21 - Nonton Film Sub Indo

Scan Type

public

Favicon Hash

MMH3: 87458931

MD5: 4cda530c6904c8f8e2586e96f8909e44

Domain Name Analysis

The domain name 'lk21.living' uses the .living top-level domain while skipping any subdomain. The registrable portion 'lk21' spans 4 characters split between zero vowels and 2 consonants; it also includes two digits. Segmentation suggests 2 words: lk, 21. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.27s

Total Load Time

2.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:13,501 chars

Detector Agreement:60%

Website Classification

Primary Category

entertainment media84% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

entertainment media

84%

documentation technical

34%

phishing scam

32%

download file sharing

29%

adult content

25%

Detected Features

Articles

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.64.148.115Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.240.108.68	United States	AS7979Servers.com, Inc.
5	142.251.20.95Google · CDN	United States	AS15169Google LLC
5	142.250.154.97Google · CDN	United States	AS15169Google LLC
5	172.240.253.132	Ashburn, Virginia, United States	AS7979Servers.com, Inc.
5	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.18.39.141Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.240.127.234	United States	AS7979Servers.com, Inc.
189	36	-	-