Security Scan Report: amanahceria.us.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 4 domains to perform 8 HTTP transactions. The main domain is us.com and was registered 33 years ago.

Submitted URL: https://amanahceria.us.com

AI Security Verdict

Moderate Risk

Confidence: 75%

5
Risk Score

Illegal Indonesian togel/slot gambling page offering an APK download and an obfuscated shortener login link, and linking out to a domain flagged as clearfake malware by two feeds.

Risk Factors (5)
Illegal online gambling / togel and slot betting content targeting Indonesian users
Outbound link to a domain flagged as clearfake malware (multi-source threat intelligence)
Sideloaded APK download offer, a common malware delivery vector on gambling sites
Login funnel obfuscated behind a cutt.ly URL-shortener link rather than a direct domain
Unranked domain with no verifiable operator identity
Safety Factors (5)
No credential, login or payment form fields on the page (0 forms)
No JavaScript malware / YARA patterns detected
No network IDS (Suricata) alerts
No cross-origin credential exfiltration observed
Established domain (12335 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

AMANAHTOTO: Bandar Slot Resmi dengan Reputasi Bayar Tercepat

Scan Type

public

Domain Name Analysis

The domain 'amanahceria.us.com' uses the commercial generic top-level domain (.com), featuring subdomain 'amanahceria'. Its registrable label 'us' stretches across 2 characters containing one vowel alongside 1 consonant. Word splitting yields 1 word: us. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://amanahceria.us.com

Page Load Overview

2.41s
Total Load Time
2.0 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:id
Text Length:226 chars
Detector Agreement:60%

Website Classification

Primary Category

gambling betting94% confidence
Type: static
Method: ml+structural

All Detected Categories

gambling betting
94%
download file sharing
52%
corporate
35%

Detected Features

Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.67.221.112Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2192.178.183.132Google · CDNUnited States
AS15169Google LLC
2184.168.96.247Singapore, Singapore
AS26496GoDaddy.com, LLC
2104.21.43.61Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
84--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T160038422A987219C5207823556E1FB3E2D38C807E6624C39F64D279CCF4AF54BE7754E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:KWk5F4g5A4WR2vFP0pN0umkjFacql41VIIIIX7H95PO2PXZR:KZ5F4g5A4WR2vEjFacqlGIIIIX7H7R

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:38623:ACQPUrGBoAqGFwAEAJCqZggAOaZCAxlFEuwxIuCXIHJgKKFRhcAEcAARQYoLcyVmQhigBTgJ0DxgFqRgA4GVLC+QAoQ0RM0A

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:1818181818180000
Perceptual Hash:8ccc333633d96633
Difference Hash:b1b3b3b3b3b3b135
Wavelet Hash:1919191b1f1f1f17
Color Hash:#b7bf40

Scan History

Scan history not available

Unable to load historical scan data