ScanMalware.com

Security Scan Report: bima-mobile-aktivasi-pemulihan.edgeone.app

Redirected to:
https://bima-mobile-aktivasi-pemulihan.edgeone.app/login.html
Submitted: Jul 8, 2026, 12:50:06 AMCompleted: Jul 8, 2026, 12:51:14 AMpubliccompleted
Loading additional data...

Summary

This website contacted 2 IPs in 2 countries across 2 domains to perform 4 HTTP transactions. The main domain is bima-mobile-aktivasi-pemulihan.edgeone.app and was registered NaN years ago.

Submitted URL: https://bima-mobile-aktivasi-pemulihan.edgeone.app/

Effective URL: https://bima-mobile-aktivasi-pemulihan.edgeone.app/login.htmlRedirected

AI Security Verdict

Low Risk

Confidence: 80%

3
Risk Score

The site impersonates the Bima brand on an unknown‑age subdomain and is linked to a known malicious IP, indicating high risk.

Risk Factors
Brand impersonation on a non‑official domain
Unranked / low‑reputation domain
Threat‑intel match to known malicious IP
Safety Factors
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 7 to 3
Domain age information unavailable

Details

Page Title

Bima Login

Scan Type

public

Language

🇮🇩

ID

(80% confidence)

Category

healthcare medical

(53%)

Domain Information

Within the application-focused generic top-level domain (.app), 'bima-mobile-aktivasi-pemulihan.edgeone.app' is registered with subdomain 'bima-mobile-aktivasi-pemulihan'. The core label 'edgeone' covers 7 characters holding four vowels versus 3 consonants. Breaking it apart gives two words: edge, one. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bima-mobile-aktivasi-pemulihan.edgeone.app/

Page Load Overview

0.71s
Total Load Time
4
HTTP Requests
2
Domains
61 KB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:id
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:id
Text Length:121 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical53% confidence
Type: static
Method: ml+structural

All Detected Categories

healthcare medical
53%
documentation technical
38%
technology software
38%
finance banking
33%
cryptocurrency blockchain
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2135.181.63.70Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
243.152.26.58Singapore
AS139341ACE
42--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A532B83627131531597BF1A96BCA96283036D403AC89CA18779C53079FD3EA993B2B8C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:8VteIDVy15IORAKzvPFyIbxE37w4UymCbhh77a3vj:CDVy3AsFjxCUIh4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:11620:RpEiAwF1YIijGAFGAhNuADQkQPBwcVYAcKARYMioKDjAACFSopLA8KawCGgIDvQgCICBcAC7ho6iQcYDihAwZ7NCjEAmz1J0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e7e7dfc3c3fff7df
Perceptual Hash:e4739b6764999924
Difference Hash:0a0cb08686700cb8
Wavelet Hash:c3c3c3c3032f0307
Color Hash:#ac8853

Other Hashes

Crop Resistant:0a0cb08686700cb8

Scan History

Scan history not available

Unable to load historical scan data