Security Report: sportorium.ptumb.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/bdb6c975-b76b-4c84-a178-a5baf5350da7 Domain and IP registration (RDAP)/api/v1/rdap/bdb6c975-b76b-4c84-a178-a5baf5350da7 Certificate Transparency/api/v1/ct/sportorium.ptumb.com How often this domain was scanned/api/v1/domain/stats/sportorium.ptumb.com Scan history for this domain/api/v1/domain/history/sportorium.ptumb.com?limit=15

This website contacted 7 IPs in 3 countries across 7 domains to perform 93 HTTP transactions. The main domain is sportorium.ptumb.com and was registered 18 years ago.

Submitted URL: https://sportorium.ptumb.com/usaha/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate Indonesian rental site compromised: injected ErrTraffic/Exvicy WordPress ClickFix loader, fake Cloudflare verification telling users to run Terminal commands, plus CRITICAL EtherHiding IDS alert and multi-source malicious Indicators of Compromise.

Risk Factors (5)

Compromised WordPress page serving a known ClickFix/EvilLoader-style injected malicious script

Deceptive Cloudflare-branded verification page used to trick users into running a terminal command

Network IDS CRITICAL malware/EtherHiding exfiltration alert

Page loads multiple threat-intel-flagged malicious domains and IPs

Blockchain RPC (Polygon) connections from the page, a known EtherHiding payload-delivery technique

Domain age information unavailable

Details

Page Title

Unit Usaha Archive - sportorium - PT UMB

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'sportorium.ptumb.com' is registered, featuring subdomain 'sportorium'. Count 5 characters in 'ptumb' holding 1 vowel versus 4 consonants. It segments into two words: pt, umb. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.36s

Total Load Time

1.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,475 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software27% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

27%

corporate

25%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	147.93.80.15	Jakarta, Jakarta, Indonesia	AS47583Hostinger International Limited
13	172.217.208.95Google · CDN	United States	AS15169Google LLC
13	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
13	142.251.14.94Google · CDN	United States	AS15169Google LLC
13	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
13	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
13	142.251.13.94Google · CDN	United States	AS15169Google LLC
93	7	-	-