ScanMalware.com

Security Scan Report: bima-mobile-aktivasi-pemulihan.edgeone.app

Submitted: Jul 8, 2026, 12:50:08 AMCompleted: Jul 8, 2026, 12:51:15 AMpubliccompleted
Loading additional data...

Summary

This website contacted 7 IPs in 4 countries across 5 domains to perform 11 HTTP transactions. The main domain is bima-mobile-aktivasi-pemulihan.edgeone.app and was registered NaN years ago.

Submitted URL: https://bima-mobile-aktivasi-pemulihan.edgeone.app/login.html

AI Security Verdict

Low Risk

Confidence: 85%

3
Risk Score

The site impersonates the Bima brand on an unknown‑age hosting subdomain and is linked to a known malicious IP, indicating high‑risk phishing activity.

Risk Factors
Unranked / low‑reputation domain
Brand impersonation (claims to be Bima login on unrelated subdomain)
Threat‑intel indicator on hosting IP
Safety Factors
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 7 to 3
Domain age information unavailable

Details

Page Title

Bima Login

Scan Type

public

Language

🇮🇩

ID

(80% confidence)

Category

healthcare medical

(53%)

Domain Information

The domain 'bima-mobile-aktivasi-pemulihan.edgeone.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'bima-mobile-aktivasi-pemulihan'. The second-level label 'edgeone' is 7 characters long holding four vowels versus 3 consonants. Word splitting yields two words: edge, one. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bima-mobile-aktivasi-pemulihan.edgeone.app/login.html

Page Load Overview

0.73s
Total Load Time
11
HTTP Requests
5
Domains
91 KB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:id
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:id
Text Length:121 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical53% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
53%
documentation technical
38%
technology software
38%
finance banking
33%
cryptocurrency blockchain
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5135.181.63.70Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
1142.251.20.94Google · CDNUnited States
AS15169Google LLC
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
143.152.26.58Singapore
AS139341ACE
1104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1101.33.10.10Frankfurt am Main, Hesse, Germany
AS139341ACE
117--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A532B83627131531597BF1A96BCA96283036D403AC89CA18779C53079FD3EA993B2B8C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:8VteIDVy15IORAKzvPFyIbxE37w4UymCbhh77a3vj:CDVy3AsFjxCUIh4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11620:RpEiAwF1YIijGAFGAhNuADQkQPBwcVYAcKARYMioKDjAACFSopLA8KawCGgIDvQgCICBcAC7ho6iQcYDihAwZ7NCjEAmz1J0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7dfc3c3fff7df
Perceptual Hash:e4739b6764999924
Difference Hash:0a0cb08686700cb8
Wavelet Hash:c3c3c3c3032f0307
Color Hash:#cc6ce0

Other Hashes

Crop Resistant:0a0cb08686700cb8

Scan History

Scan history not available

Unable to load historical scan data