lokerkoperasi-merahputihbl.gtx1y.web.id
Kategoria: Phishing
Aby korzystać z produktu z pełną funkcjonalnością, musisz kupić licencję na Combo Cleaner. Dostępny jest ograniczony siedmiodniowy bezpłatny okres próbny. Combo Cleaner należy do RCS LT i jest obsługiwany przez tę firmę, spółkę macierzystą PCRisk.com.
Quttera Web Malware Removal to płatna usługa subskrypcyjna. Ceny, plany i dostępność wersji próbnej ustala Quttera. Quttera jest obsługiwana przez Quttera Ltd, niezależną firmę zewnętrzną niezwiązaną z RCS LT. PCrisk.com może otrzymać prowizję za polecenie, gdy użytkownicy zarejestrują się przez ten link.
Opis lokerkoperasi-merahputihbl.gtx1y.web.id
This domain appears to host an Indonesian-language registration page themed around "Koperasi Merah Putih," with messaging about village economic development, careers, and trusted participation. The visible page asks visitors to choose a province and enter an active Telegram number before clicking a registration button, suggesting it may be presented as a recruitment, membership, or sign-up portal.
The domain structure is unusual for an official public-facing service: it uses a long subdomain under gtx1y.web.id rather than a clearly branded standalone domain. Based on the screenshot and naming, the site appears to target Indonesian users and may be attempting to associate itself with a cooperative, employment, or community program, but the scan data does not independently verify the operator's identity or any official affiliation.
Ocena bezpieczeństwa lokerkoperasi-merahputihbl.gtx1y.web.id
This website shows several cautionary signals at the time of this scan. One out of 91 security engines flagged the domain for phishing, and a malware scan marked one JavaScript file as malicious without naming a specific malware family. In addition, the domain was registered very recently (age: 0 days), has no established traffic ranking, and the page requests a Telegram number as part of the registration flow, which can be a risk factor when combined with a newly created domain and unclear ownership.
At the same time, broader blacklist checks were clean at the time of this scan, with no listings found across the checked threat databases, and the page did load over a valid HTTPS certificate. Even so, the combination of a brand-like or program-like presentation, a fresh domain, limited operator transparency, and at least some security-tool concern means the site should be approached carefully. Based on these findings, this website may pose potential risks to visitors.
Opis techniczny
The site was served through Cloudflare infrastructure from IP address 172.67.188.54, with Cloudflare nameservers and a valid TLS certificate issued by Google Trust Services that was set to expire in September 2026. This indicates encrypted transport was available at the time of testing, although the specific protocol details were not provided in the scan data.
From a domain-security perspective, the domain is extremely new, DNSSEC appears to be unsigned, and the hosting setup uses a shared reverse-proxy platform that can obscure origin details. One scanned JavaScript asset was flagged as malicious by the malware scan, while external links and referenced domains were not flagged during this check.
Podziel się swoimi doświadczeniami z tą witryną. Czy była bezpieczna? Czy wystąpiły jakieś problemy?