mfe-user-loyalties-jkt.internal.gift.id
Category: Technology
Fixed it? Get mfe-user-loyalties-jkt.internal.gift.id re-reviewed in 3 steps
Each security engine decides its own verdict, and most re-review a site within a few days of being asked. Start once the site is clean.
- 1Make sure it's goneRemove any injected code, update the site software and change admin passwords.
- 2Ask the 3 engines to re-reviewADMINUSLabs, CRDF and Fortinet flag it, and only they can remove their flags. Clean the site first, then ask each of them to check it again.
- 3Tell us it's fixedDispute this score and choose “Issue has been resolved”. After you confirm your email, a person reviews it, usually within 1-2 business days.
Steps 1-3 are free
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of mfe-user-loyalties-jkt.internal.gift.id
The domain mfe-user-loyalties-jkt.internal.gift.id appears to host a web application or internal-facing service titled "User Loyalties." Based on the hostname structure, it may be part of a larger subdomain environment under gift.id, with "mfe" possibly referring to a micro-frontend or modular application component and "jkt" likely indicating a Jakarta deployment or regional instance.
The page metadata is minimal and does not provide much public-facing business context beyond the title and description. The infrastructure suggests a cloud-hosted application rather than a consumer content site, and the use of an "internal" subdomain label may indicate that it was intended for limited access, testing, or organizational use rather than broad public browsing.
Safety Assessment for mfe-user-loyalties-jkt.internal.gift.id
Scan results show mixed signals at the time of this scan. A small number of security engines flagged the domain, with 3 out of 92 reporting malicious or malware-related concerns, while broader blacklist and threat-database checks did not show listings for known web threats. The malware scan available here did not identify flagged files, and no external links, referenced domains, or iframes were observed in the collected page data.
There are also some contextual factors that modestly reduce uncertainty. The domain has been registered for more than 11 years, uses valid HTTPS, and has DNSSEC enabled, which can be consistent with an established deployment. At the same time, the hostname structure is unusual for a public website, the domain has no visible traffic ranking, and the multi-engine detections mean caution is still warranted. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The site presented a valid Let's Encrypt SSL certificate, with expiry shown as 2026-11-07, and DNSSEC appears to be enabled. DNS is routed through Cloudflare nameservers, while the resolved server infrastructure points to AWS EC2 in the Jakarta region. The web server identifies as istio-envoy, which may indicate a containerized or service-mesh-based application environment.
No DNS-based blocklist hits were reported in the provided data, and the available malware scan did not identify suspicious files. However, the combination of a cloud-hosted internal-style subdomain and limited page content means there is not much application-layer context available from this snapshot alone.
Share your experience with this website. Was it safe? Did you encounter any issues?