ScanMalware.com

Security Scan Report: tokowatchayu89-org.pages.dev

Redirected to: https://act.taiwanrestaurantsf.net/

Site favicon
Submitted: Jan 31, 2026, 9:38:37 AMCompleted: Jan 31, 2026, 9:39:59 AMpubliccompleted
Loading additional data...

Summary

This website contacted 14 IPs in 2 countries across 15 domains to perform 335 HTTP transactions. The main domain is act.taiwanrestaurantsf.net and was registered NaN years ago.

Submitted URL: http://tokowatchayu89-org.pages.dev/

Effective URL: https://act.taiwanrestaurantsf.net/Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Site likely phishing; do not provide login information

Risk Factors
Credential harvesting form on a newly created subdomain
Unranked, low‑reputation domain
Social‑engineering monetary lure in visible text
Domain age information unavailable

Details

Page Title

AYU89 : Situs Website Paling Terkenal Dengan Banyak Penggemarnya

Scan Type

public

Language

🇮🇩

ID

(80% confidence)

Category

phishing scam

(72%)

Domain Information

You're looking at domain 'tokowatchayu89-org.pages.dev' on the developer-focused generic top-level domain (.dev) and includes subdomain 'tokowatchayu89-org'. Count 5 characters in 'pages' holding two vowels versus three consonants. Word splitting yields one word: pages. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://tokowatchayu89-org.pages.dev/

Page Load Overview

12.86s
Total Load Time
350
HTTP Requests
19
Domains
46.5 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

Language Code:id
Detection Confidence:80%
Script Type:Unknown
HTML Lang Attribute:id
Text Length:5,173 chars
Detector Agreement:80%

Website Classification

Primary Category

phishing scam72% confidence
Type: webapp
Method: ml+structural

All Detected Categories

phishing scam
72%
gambling betting
63%
entertainment media
53%
finance banking
35%
cryptocurrency blockchain
35%

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25172.66.47.133United States
AS13335Cloudflare, Inc.
25104.26.3.212United States
AS13335Cloudflare, Inc.
25104.17.24.14United States
AS13335Cloudflare, Inc.
25142.251.140.187United States
AS396982
25172.217.23.106United States
AS15169Google LLC
25157.240.0.6Frankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
252.23.227.8Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
25104.16.174.226United StatesUnknown
2534.160.81.0Kansas City, Missouri, United States
AS396982Google LLC
25104.21.67.18United States
AS13335Cloudflare, Inc.
35014--

Detected Technologies1

PasswordField
100%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EDB43CB1A3804C6B372B06C5F05AB74DE056790BFE8A49D4F5AC93247BC7EE25C512E8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:8ktx8HxQzBIR4D5MTVJ8TO+Ud6wMa3JW+:t8Hx/RlJ8T5Ud/VJW+

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:530525:DgQElNLzYQDEjBAkIO4SgIFIHOoRJzIBQUWiYFgUwJUJVxUZmQCIAAAVWQGJMFoBGKKEAQlsiBwICHmsRkIQhFkxwEDYAQAD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00242c3c3c3c3f39
Perceptual Hash:83762d985c8d7336
Difference Hash:f0c4ccf0f0f9f1f3
Wavelet Hash:00243c3c3c7d3f3f
Color Hash:#ac5388

Other Hashes

Crop Resistant:79054907f9c9d1f1,4969f5b4fa6af2b0,89f8f96c362938fe,bcf6c2893c390a48,59292624242626e6,f0c4ccf0f0f9f1f3

Scan History

Scan history not available

Unable to load historical scan data