Security Scan Report: buwiahamnas.my.id

Redirected to:
https://buwiahamnas.my.id/#/pages/login/login
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 6 domains to perform 65 HTTP transactions. The main domain is buwiahamnas.my.id and was registered 5 days ago.

Submitted URL: https://buwiahamnas.my.id/

Effective URL:
https://buwiahamnas.my.id/#/pages/login/login
Redirected

AI Security Verdict

High Risk

Confidence: 72%

8
Risk Score

Four-day-old, unbranded 'Login' page capturing a password with no username field, contacting random .icu/.web.id hosts flagged by IDS. Treat as credential harvesting; do not enter credentials.

Risk Factors (5)
Password field without a username or email field (orphan credential capture pattern)
Domain only 4 days old at scan time
No brand, company name or purpose stated anywhere on the login page
Page contacts randomly-generated external hostnames on .icu and .web.id TLDs
Network IDS flagged suspicious .icu domain DNS/TLS activity tied to this page's load
Domain age information unavailable

Details

Page Title

登录

Scan Type

public

Domain Name Analysis

The domain 'buwiahamnas.my.id' uses the Indonesian country-code top-level domain (.my.id) and has no subdomain. The second-level label 'buwiahamnas' is 11 characters long containing 5 vowels alongside 6 consonants. Splitting it apart reveals 5 words: bu, wi, a, ham, nas. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

O wees

Page Load Overview

8.80s
Total Load Time
7.7 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh-CN
Text Length:84 chars
Detector Agreement:50%

All Detected Languages

🇪🇸es(98%)🇨🇳zh(2%)

Website Classification

Primary Category

unknown0% confidence
Type: dynamic
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
44191.223.38.32Hong Kong, Hong Kong
AS140227Hong Kong Communications International Co., Limited
8124.174.83.100China
AS137718Beijing Volcano Engine Technology Co., Ltd.
864.32.26.230Chicago, Illinois, United States
AS46844Sharktech
8170.178.172.232Los Angeles, California, United States
AS46844Sharktech
8124.174.83.108China
AS137718Beijing Volcano Engine Technology Co., Ltd.
8124.174.94.22China
AS137718Beijing Volcano Engine Technology Co., Ltd.
1163.181.254.192United States
AS24429Zhejiang Taobao Network Co.,Ltd
1124.174.94.142China
AS137718Beijing Volcano Engine Technology Co., Ltd.
658--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11F239727790A26249437CD14A8E1771E922AE333C61249AD729D631ECFCBDC72DB178D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:IdZXEnf358xeF0aCYEV2Ot/q17EUzOVUoTzhBeC3D:l358xeF0aCYEV2Ot/q17Tn+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:49230:ouILhwUIJIAjkIiZMCV6HgVA1NpgXA8C6haobIZpogSIwxQcKIKAGIIQFMGBYUAgRGwIxHCMEETFEQ4pEEgAQyQRE01IlHAK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0119181818200447
Perceptual Hash:88893667aa67778c
Difference Hash:d3b333f3b2c8cc8d
Wavelet Hash:111919197c7c6ee7
Color Hash:00000018006

Scan History

Scan history not available

Unable to load historical scan data