lokerkoperasi-merahputihbl.gtx1y.web.id
Category: Phishing
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of lokerkoperasi-merahputihbl.gtx1y.web.id
This domain appears to host an Indonesian-language registration page themed around "Koperasi Merah Putih," with messaging about village economic development, careers, and trusted participation. The visible page asks visitors to choose a province and enter an active Telegram number before clicking a registration button, suggesting it may be presented as a recruitment, membership, or sign-up portal.
The domain structure is unusual for an official public-facing service: it uses a long subdomain under gtx1y.web.id rather than a clearly branded standalone domain. Based on the screenshot and naming, the site appears to target Indonesian users and may be attempting to associate itself with a cooperative, employment, or community program, but the scan data does not independently verify the operator's identity or any official affiliation.
Safety Assessment for lokerkoperasi-merahputihbl.gtx1y.web.id
This website shows several cautionary signals at the time of this scan. One out of 91 security engines flagged the domain for phishing, and a malware scan marked one JavaScript file as malicious without naming a specific malware family. In addition, the domain was registered very recently (age: 0 days), has no established traffic ranking, and the page requests a Telegram number as part of the registration flow, which can be a risk factor when combined with a newly created domain and unclear ownership.
At the same time, broader blacklist checks were clean at the time of this scan, with no listings found across the checked threat databases, and the page did load over a valid HTTPS certificate. Even so, the combination of a brand-like or program-like presentation, a fresh domain, limited operator transparency, and at least some security-tool concern means the site should be approached carefully. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site was served through Cloudflare infrastructure from IP address 172.67.188.54, with Cloudflare nameservers and a valid TLS certificate issued by Google Trust Services that was set to expire in September 2026. This indicates encrypted transport was available at the time of testing, although the specific protocol details were not provided in the scan data.
From a domain-security perspective, the domain is extremely new, DNSSEC appears to be unsigned, and the hosting setup uses a shared reverse-proxy platform that can obscure origin details. One scanned JavaScript asset was flagged as malicious by the malware scan, while external links and referenced domains were not flagged during this check.
Share your experience with this website. Was it safe? Did you encounter any issues?