Security Scan Report: arnidecor.com

Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 5 domains to perform 32 HTTP transactions. The main domain is arnidecor.com and was registered 8 years ago.

Submitted URL: https://arnidecor.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Established-looking Indonesian flooring site is compromised and serving the ClearFake Polygon EtherHiding loader (hunting rule + kit roster) with a corroborated 2-feed malware reputation match on the primary domain. Treat as malicious; do not browse.

Risk Factors (4)
ClearFake malicious kit injected into the page (hunting rule: ClearFake_Polygon_Contract_Loader)
EtherHiding via Polygon smart-contract contract call to retrieve C2 server list
Primary domain flagged as malware by two independent threat-intelligence feeds
Likely load of a secondary obfuscated JavaScript stage (/js/all.min.js) for non-crawler Windows visitors
Domain age information unavailable

Details

Page Title

Jual Lantai Vinyl Harga Termurah | Distributor Terbesar Di Jakarta - ArniDecor.Com

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'arnidecor.com' is registered with no subdomain. Its registrable label 'arnidecor' stretches across 9 characters split between 4 vowels and five consonants. Word splitting yields 2 words: arni, decor. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Product Our Blog Search for: Status 085363773105 (Nova) ORDER LEBIH MUDAH VIA WHATSAPP — KLIK DISINI—— © Hubungi

Page Load Overview

4.26s
Total Load Time
457 KB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:50%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:840 chars
Detector Agreement:100%
Language mismatch: Declared as en-US but detected as id

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4103.16.198.22Indonesia
AS131775PT. Jupiter Jala Arta
4142.251.110.95Google · CDNUnited States
AS15169Google LLC
4104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
4142.251.20.94Google · CDNUnited States
AS15169Google LLC
4104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
4151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
328--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T195433BB1C36C8CBA593047E59C347E5839B9247BDB42C98DF7DFE5A06B809E00361B68

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:NZR7kQ6KXZDYUzto7qu/yZWOJJVMtnI6TCMJ7mo1zw:r9ZNJsI6TCMJCoRw

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:57620:FwhYRFCoAd2EAOb0IUUIBMBFLGAxmiCACEBcAEDIEzAC6WsMwAGAirFZiIEPgLgD42wIkJAkwQoAgMihQAMaCQbF6QmKEoyA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffbff9f9f9f9f979
Perceptual Hash:e9b694f6016b9269
Difference Hash:68733333539313d3
Wavelet Hash:8698989898f9f979
Color Hash:N/A

Other Hashes

Crop Resistant:68733333539313d3

Scan History

Scan history not available

Unable to load historical scan data