Security Scan: Default Web Site Page

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/94bf9906-2296-4b9a-b561-f04fe4d65d4d Domain and IP registration (RDAP)/api/v1/rdap/94bf9906-2296-4b9a-b561-f04fe4d65d4dHow often this domain was scanned/api/v1/domain/stats/programakuntansi.id Scan history for this domain/api/v1/domain/history/programakuntansi.id?limit=15

This website contacted 6 IPs in 1 country across 4 domains to perform 41 HTTP transactions. The main domain is programakuntansi.id and was registered 3 years 5 months ago.

Submitted URL: https://programakuntansi.id/cgi-sys/defaultwebpage.cgi

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Compromised site serving a ClickFix fake Cloudflare verification that tricks Windows users into pasting a malicious command into Terminal; confirmed by hunting rule kit match, malware IoCs and critical IDS alerts.

Risk Factors (5)

Known malicious ClickFix kit injected into the page (Win+X Terminal clipboard execution lure)

19 critical IDS 'ET MALWARE EtherHiding Exfil' alerts indicating active malware traffic

Primary domain flagged as malware ('iclickfix') by two independent threat-intel feeds

Scanned URL flagged as unknown malware by two independent feeds

Fake Cloudflare bot-verification overlay impersonating a security brand to socially engineer code execution

Domain age information unavailable

Details

Page Title

Default Web Site Page

Scan Type

public

Domain Name Analysis

The domain name 'programakuntansi.id' uses the Indonesian country-code top-level domain (.id) while skipping any subdomain. The registrable portion 'programakuntansi' spans 16 characters with 6 vowels and 10 consonants. Splitting it apart reveals five words: program, a, kun, tans, i. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

If you are the owner of this website, please contact your hosting provider: webmaster The IP address has changed. The IP address for this domain may have changed recently. Check your DNS settings to...

Page Load Overview

1.83s

Total Load Time

89 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:52%

Script:Latin

Direction:ltr

Detection Details

Text Length:1,852 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical71% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

71%

technology software

70%

phishing scam

62%

blog personal website

45%

government public service

43%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	104.21.4.120Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	172.67.132.13Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
6	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
6	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
41	6	-	-