Security Scan Report: pertamina-pemesanan-ia.vercel.app

Site favicon
Submitted: Completed: publiccompleted
This website contacted 21 IPs in 4 countries across 12 domains to perform 34 HTTP transactions. The main domain is vercel.app and was registered 6 years ago.

Submitted URL: https://pertamina-pemesanan-ia.vercel.app/

AI Security Verdict

High Risk

Confidence: 75%

7
Risk Score

Fake 'DANA Customer Care' page on a vercel.app subdomain impersonating the DANA e-wallet brand and posting data to an external demcloud.my.id endpoint. Avoid interaction and report.

Risk Factors (4)
Impersonation of the DANA financial brand on a non-official vercel.app domain
Cross-origin POST to a suspicious external endpoint (demcloud.my.id) on the same fake 'DANA' path
Page bundles two unrelated trusted brands (DANA and Pertamina)
Unranked, no reputation, shared-hosting subdomain with unknown creation date
Domain age information unavailable

Details

Page Title

๐——๐—”๐—ก๐—” | ๐—–๐˜‚๐˜€๐˜๐—ผ๐—บ๐—ฒ๐—ฟ ๐—–๐—ฎ๐—ฟ๐—ฒ ๐——๐—”๐—ก๐—”

Scan Type

public

Domain Name Analysis

You're looking at domain 'pertamina-pemesanan-ia.vercel.app' on the application-focused generic top-level domain (.app) and includes subdomain 'pertamina-pemesanan-ia'. Its registrable label 'vercel' stretches across 6 characters containing 2 vowels alongside 4 consonants. Segmentation suggests 2 words: ver, cel. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pertamina-pemesanan-ia.vercel.app/

Page Load Overview

21.73s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

๐Ÿ‡ฎ๐Ÿ‡ฉIndonesian
Code: id
Confidence:37%
Script:Unknown
Direction:ltr

Detection Details

Text Length:222 chars
Detector Agreement:60%

Website Classification

Primary Category

finance banking81% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

finance banking
81%
e-commerce shopping
50%
government public service
45%
news media journalism
36%
adult content
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1464.29.17.195Aws ยท CLOUDUnited States
AS16509Amazon.com, Inc.
1104.18.10.207Cloudflare ยท WAFUnited States
AS13335Cloudflare, Inc.
1104.17.208.5Cloudflare ยท WAFUnited States
AS13335Cloudflare, Inc.
1104.17.25.14Cloudflare ยท WAFUnited States
AS13335Cloudflare, Inc.
1192.178.183.95Google ยท CDNUnited States
AS15169Google LLC
1185.199.111.153Fastly ยท CDNUnited States
AS54113Fastly, Inc.
1192.178.183.132Google ยท CDNUnited States
AS15169Google LLC
1103.150.93.32Bogor, West Java, Indonesia
AS133800PT Biznet Gio Nusantara
1188.114.97.9Cloudflare ยท WAFUnited States
AS13335Cloudflare, Inc.
1172.67.75.73Cloudflare ยท WAFUnited States
AS13335Cloudflare, Inc.
3421--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T112412363A540940916005395F8A7704C88EB0C1F4ED9BCBAF4FB0525AFBC6CA14BBB1E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:amFWKirZaiZ+QdZbdWZbdWb/ijBZljZB1ZL:aWZiZ+6Jd8dE/WvjX1p

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2083:AAIQCAQAAAAgAAgiQAEAkAAAgADIIAoAAAAAAAQAAIAAQAAAQAAAAAiIAEAACAICAQCAFEBBBAAEAhAAAQAAQAAQBAACgAAB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00e7ffe7e7ffe7e7
Perceptual Hash:b34c734c73195c33
Difference Hash:4d0c0c4c0c004d4d
Wavelet Hash:00e7e4e4243c0404
Color Hash:#b0bf40

Scan History

Scan history not available

Unable to load historical scan data