ScanMalware.com

Security Scan Report: kimia.fkip.unila.ac.id

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cfbb350a-5e66-4e40-9e10-7e6884236b31Domain and IP registration (RDAP)/api/v1/rdap/cfbb350a-5e66-4e40-9e10-7e6884236b31How often this domain was scanned/api/v1/domain/stats/kimia.fkip.unila.ac.idScan history for this domain/api/v1/domain/history/kimia.fkip.unila.ac.id?limit=15
This website contacted 28 IPs in 2 countries across 18 domains to perform 103 HTTP transactions. The main domain is unila.ac.id and was registered 16 years ago.

Submitted URL: https://kimia.fkip.unila.ac.id

The Cisco Umbrella rank of the primary domain is #177,912 of the top 1 million websites

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate university site whose page HTML carries ClearFake ClickFix loader injections confirmed by roster-anchored YARA rules; treat the site as compromised and avoid visiting.

Risk Factors (4)
ClearFake ClickFix phishing/loader kit injected into the page HTML (roster-anchored YARA, CRITICAL and HIGH severity)
Rival-kit cleanup script that suppresses other kits and blocks navigation for up to 45 seconds while an overlay is displayed
Single-source threat-intel report of the primary domain as a malicious host
Evidence of possible unmaintained CMS/compromise on an academic subdomain (redirect chain of 3 hops, obfuscator heuristics)
Domain age information unavailable

Details

Page Title

Pendidikan Kimia FKIP Unila – Inovatif, Kreatif, Religius

Scan Type

public

Domain Name Analysis

You're looking at domain 'kimia.fkip.unila.ac.id' on the Indonesian country-code top-level domain (.ac.id); it also runs on subdomain 'kimia.fkip'. Count 5 characters in 'unila' holding three vowels versus 2 consonants. It segments into two words: uni, la. Median word length comes out to 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://kimia.fkip.unila.ac.id

Page Load Overview

9.98s
Total Load Time
4.6 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:id
Text Length:3,271 chars
Detector Agreement:75%

Website Classification

Primary Category

education learning68% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
68%
government public service
57%
news media journalism
47%
news/blog
20%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22103.3.46.129Indonesia
AS56237Universitas Lampung
374.125.29.95Google · CDNUnited States
AS15169Google LLC
338.147.106.188Draper, Utah, United States
AS26042FiberState, LLC
3142.251.14.139Google · CDNUnited States
AS15169Google LLC
3104.20.23.96Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.113Google · CDNUnited States
AS15169Google LLC
3172.66.169.241Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
3142.251.13.94Google · CDNUnited States
AS15169Google LLC
10328--

Detected Technologies13

WordPressv7.1.3
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Nginx
40%
Elementorv4.2.4
40%
jQuery Migrate
20%
YouTube
20%
Translate WordPress
20%
Swiper
20%
Statcounter
20%
Font Awesome
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E364C7907A93203D323F43AFE0ABBA0C61569983C64D62D6F1BD5116D7A9F8177E070E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:UNNtAW9i36OJu9xJGo00KnMf11DuVrCIBGOIURWzqElemKfu2cYkN34c5o7l:dW9+6OJaxJGo00Kni1/1URWzqEleL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:323501:ZSAAyVEAIAo8C00I5ApIiLSqJWThEKAI0W6qLIRSIpgAgM3gASITAeBCIEDqGFkACg0OA8KCIspABJCLQFQUPBCSUOgVEDDg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:baff27010f0fffcf
Perceptual Hash:9147fc196a6e38e1
Difference Hash:62dccc6dd99d3f3b
Wavelet Hash:007e27010f0fff8f
Color Hash:#97bf40

Other Hashes

Crop Resistant:62dccc6dd99d3f3b,0000809696860601,8040202090080420,5370921979616b67,654b94f464142329

Scan History

Scan history not available

Unable to load historical scan data