# PhishDestroy domain threat record: aplc.site Content language: English Canonical HTML report: https://phishdestroy.io/domain/aplc.site/ Machine-readable companion: https://phishdestroy.io/domain/aplc.site/llm.txt ## Summary PhishDestroy stores a threat-intelligence record for this domain. This document reports the latest stored fields; it is not a real-time guarantee of availability or safety. ## Stored observations - Listed by PhishDestroy: yes - Availability at last stored check: observed active - First observed by PhishDestroy: 2026-10-21 20:48:26 UTC - Last availability or vendor check: 2026-10-23 11:04:00 UTC - Stored record updated: 2026-10-23 18:20:35 UTC - VirusTotal detections in the stored snapshot: 15/92 - Independent public blocklist matches in the stored snapshot: 0 - Google Safe Browsing stored result: no stored flag ## Stored infrastructure - Observed IP address: 202.10.43.124 - Registrar in stored WHOIS data: CV. Rumahweb Indonesia - Registrar country in stored WHOIS data: ID - Registration date (registry RDAP, aplc.site): 2023-12-28 04:37:28 UTC ## Evidence links - URLScan report: https://urlscan.io/result/01a16037-7ed6-72d7-80c8-bf34a49483c1/ - VirusTotal domain view: https://www.virustotal.com/gui/domain/aplc.site - Certificate Transparency search: https://crt.sh/?q=%25.aplc.site - Web Archive lookup: https://web.archive.org/web/*/https://aplc.site/ ## Corrections - Appeal or correct this record: https://phishdestroy.io/appeals/ - Methodology and help: https://phishdestroy.io/faq ## Stored PhishDestroy analysis Overview PhishDestroy added aplc.site to its internal blocklist because VirusTotal reported 13 malicious and 2 suspicious detections from 92 engines. The recorded page title reads "PELANGI888: Pilihan Fitur Hiburan Online untuk Pengunjung Baru". The domain was first seen by PhishDestroy on 2026-10-21 and returned an HTTP 200 response at that time. How the scam works The detections point to a generic phishing risk where a site mimics a gambling service to lure visitors into providing personal or financial information. No specific credential‑stealing form or wallet request was observed on the captured page, so the classification relies on the overall malicious reputation rather than a confirmed theft mechanism. Evidence VirusTotal (analysis 2026-10-19) listed 13 malicious and 2 suspicious vendors out of 92 scans. Google Safe Browsing (checked 2026-10-21) did not flag the site. urlscan.io (captured 2026-10-21) gave a malicious verdict with a score of 100, categorising it as phishing and tagging it as generic gambling. OTX recorded four pulses mentioning the domain (checked 2026-10-21). No external blocklists reported the domain, but PhishDestroy’s internal list marked it as malicious. Infrastructure The domain was registered on 2023-12-28 through CV. Rumahweb Indonesia and is hosted on IP 202.10.43.124, a Rumahweb network in Indonesia. TLS was provided by Let’s Encrypt, valid from 2026-10-11 to 2027-01-09, and includes several sub‑domains in its SAN. Open ports include standard web and mail services. What to do Visitors should avoid entering any credentials or personal data on aplc.site and, if they have already done so, change related passwords and monitor accounts for suspicious activity. Security teams should block the domain, add it to threat‑intel feeds, and review logs for any connections to 202.10.43.124. Useful links urlscan.io scan and screenshot: https://urlscan.io/result/01a16037-7ed6-72d7-80c8-bf34a49483c1/ Cloudflare Radar report: https://radar.cloudflare.com/scan/921e028e-b433-4192-96de-284c0d85919d URLQuery report: https://urlquery.net/report/e9a779bc-dfbb-4512-882b-4f36e971dcca Stored capture screenshot: https://i.ibb.co/Q36MRKWx/3e63b46686d1.png Cloudflare Radar screenshot (2026-10-21T21:20:27Z): https://screenshots.phishdestroy.io/cf/921e028e-b433-4192-96de-284c0d85919d.png URLQuery screenshot: https://screenshots.phishdestroy.io/uq/e9a779bc-dfbb-4512-882b-4f36e971dcca.png URLScan screenshot (2026-10-21T20:56:38Z): https://screenshots.phishdestroy.io/us/01a16040-4891-7270-8664-77f2338f5ada.png URLScan capture report: https://urlscan.io/result/01a16040-4891-7270-8664-77f2338f5ada/ VirusTotal report: https://www.virustotal.com/gui/domain/aplc.site Google Safe Browsing status: https://transparencyreport.google.com/safe-browsing/search?url=aplc.site Report phishing to Google: https://safebrowsing.google.com/safebrowsing/report_phish/ Site owner? Request a review: https://phishdestroy.io/appeals/ Analysis generated: 2026-10-21 21:22:19 UTC ## Stored page captures - Primary capture: https://i.ibb.co/Q36MRKWx/3e63b46686d1.png Captured: 2026-10-21 20:48:26 UTC - URLScan capture: https://screenshots.phishdestroy.io/01a16037-7ed6-72d7-80c8-bf34a49483c1.png Captured: 2026-10-21 20:48:26 UTC Source report: https://urlscan.io/result/01a16037-7ed6-72d7-80c8-bf34a49483c1/ - Cloudflare Radar: https://screenshots.phishdestroy.io/cf/921e028e-b433-4192-96de-284c0d85919d.png Captured: 2026-10-21 21:20:27 UTC Source report: https://radar.cloudflare.com/scan/921e028e-b433-4192-96de-284c0d85919d SHA-256: 76e165999cac3efdd2a3daaa9e851fdb628a699f7068b12bb287a932902f9511 - URLQuery: https://screenshots.phishdestroy.io/uq/e9a779bc-dfbb-4512-882b-4f36e971dcca.png Source report: https://urlquery.net/report/e9a779bc-dfbb-4512-882b-4f36e971dcca SHA-256: 70f80f5a001850d7f8fc417641127693dbe1243f055250d01efcac782cf5f39c - URLScan · 2026-10-21: https://screenshots.phishdestroy.io/us/01a16040-4891-7270-8664-77f2338f5ada.png Captured: 2026-10-21 20:56:38 UTC Source report: https://urlscan.io/result/01a16040-4891-7270-8664-77f2338f5ada/ SHA-256: 4de94ad58ea885017885e40c299b3ab78d00e7bdc4da1dcdadbd8b6fce771a0c ## Collected source observations Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator. ```json { "urlscan": { "v": 1, "fetched_at": "2026-10-21T21:16:18Z", "uuid": "01a16037-7ed6-72d7-80c8-bf34a49483c1", "scanned_at": "2026-10-21T20:47:05Z", "final_url": "https://aplc.site/", "status": 200, "redirected": "https-only", "redirects": [ { "to": "https://aplc.site/", "from": "http://aplc.site/", "status": 307 } ], "ip": "202.10.43.124", "ptr": "kumai.satu.rumahweb.net", "domains": [ "www.mothercare.co.id", "js.klevu.com", "static.cloudflareinsights.com", "mariterbang.io", "platform-cdn.sharethis.com", "api2.branch.io", "l.sharethis.com", "ipv4check.ksearchnet.com", "visitor.service.ksearchnet.com", "statsjs.klevu.com", "js-agent.newrelic.com", "maps.googleapis.com", "www.google-analytics.com", "buttons-config.sharethis.com", "app.link", "maps.google.com", "platform-api.sharethis.com", "www.googletagmanager.com", "cdn.branch.io", "ipv6check.ksearchnet.com" ], "ips": [ "162.247.243.39", "13.227.65.76", "3.170.42.112", "172.217.117.4", "172.217.222.101", "18.221.71.127", "18.160.18.32", "145.239.192.227", "54.170.20.248", "3.171.38.40", "104.16.79.73", "172.67.183.247", "142.251.179.113", "18.165.83.115", "172.253.115.97" ], "asns": [ "54113", "16509", "15169", "16276", "13335", "58487" ], "countries": [ "US", "FR", "IE", "ID" ], "link_domains": [ "www.mothercare.co.id" ], "doc_hash": "c142e822eb7c1bebb6d8de8202a7b2e50b342bb6f9c62a99591a17719a315b75", "globals": [ "LOCALE", "BASE_URL", "VIEW_URL", "required", "require", "NREUM", "webpackChunk:NRBA-1.284.1.PROD", "newrelic", "branch", "klevu_lang", "klevu_baseCurrencyCode", "klevu_currentCurrencyCode", "klevu_pubIsInUse", "klevu_current_version", "_klvWebhook", "_klvReady", "klevu", "_klvAnalyticsCollect", "_klvAnalyticsEvent", "klevu_addPriceSuffixToQueryControl", "klevu_currencySymbols", "klevu_priceFormatters", "klevu_urlProtocol", "klevu_javascriptDomain", "klevunoUiSlider", "noUiSlider", "wNumb", "gtag", "dataLayer", "nowUnixtime", "klevufejs_getCookie", "klevufejs_cookie", "klevuData", "xhttp", "cookiesConfig", "googleMapsConfig", "checkout", "st", "__stdos__", "tpcCookiesEnableCheckingDone" ], "cookies": [ "mage-cache-sessid", "_s", "_ga_404GXE7LR3", "_ga", "section_data_ids" ], "storage_keys": [ "test", "klv_kmcData_klevu-159060263433311987", "klv_user_klevu-159060263433311987_klvDataProtected", "klv_user_klevu-159060263433311987_sessionInfo", "klv_user_klevu-159060263433311987_connectorInfo", "klv_user_klevu-159060263433311987_segmentInfo", "klv_user_klevu-159060263433311987_segments", "klv_user_klevu-159060263433311987_lastSend", "klv_user_klevu-159060263433311987_ipv4", "klv_user_klevu-159060263433311987_ipv6", "klv_user_klevu-159060263433311987_uuid", "klv_user_klevu-159060263433311987_lastSendIp", "__sharethis_local_storage_test__", "mage-cache-storage", "__sak" ], "tls": { "san": [ "aplc.site", "aplc.site.arletaconsulting.space", "appbgn.org", "appbgn.org.arletaconsulting.space", "autoconfig.aplc.site", "autoconfig.appbgn.org", "autodiscover.aplc.site", "autodiscover.appbgn.org", "cpanel.aplc.site", "cpanel.appbgn.org" ], "cipher": "AES_128_GCM", "issuer": "YR1", "subject": "www.aplc.site.arletaconsulting.space", "protocol": "TLS 1.3", "valid_to": "2027-01-09T13:48:31Z", "valid_from": "2026-10-11T13:48:32Z" }, "domain_age_days": 1027, "apex_age_days": 1027, "tls_age_days": 10, "tls_valid_days": 89, "requests": 198, "verdicts": { "engines": { "tags": [ "urlscan-ml", "urlscan-ml-60c5e22" ], "score": 91, "malicious": true }, "overall": { "tags": [ "phishing" ], "score": 100, "brands": [ "genericgambling" ], "malicious": true, "categories": [ "phishing" ] }, "urlscan": { "tags": [ "phishing" ], "score": 100, "brands": [ "Generic Gambling" ], "malicious": true, "categories": [ "phishing" ] } }, "headers": { "server": "LiteSpeed", "content-type": "text/html" } }, "cf": { "v": 1, "fetched_at": "2026-10-21T21:21:29Z", "uuid": "921e028e-b433-4192-96de-284c0d85919d", "scanned_at": "2026-10-21T21:20:27Z", "final_url": "https://aplc.site/", "status": 200, "history": [ { "url": "https://aplc.site/", "status": 200 } ], "dom_hash": "d1ad0e499d651a94f1cb2eb7ac736b3921defb3b130deb79cc38c9c7fde11b13", "doc_hash": "c142e822eb7c1bebb6d8de8202a7b2e50b342bb6f9c62a99591a17719a315b75", "domain_risks": [ "Malware", "Security threats", "CIPA Filter", "CIPA" ], "radar_rank": { "bucket": ">200000" }, "dns": [ { "name": "aplc.site", "type": "A", "value": "202.10.43.124" } ], "dnssec_valid": false, "ip": "202.10.43.124", "verdict": { "tags": [ "malware" ], "malicious": true, "categories": [ "malware" ] }, "whois": { "registrar": "CV. Rumahweb Indonesia", "created": "2023-12-28T04:37:28Z", "updated": "2026-01-09T11:37:21Z", "expires": "2026-12-28T23:59:59Z", "nameservers": [ "ns1.rumahweb.com", "ns2.rumahweb.com", "ns3.rumahweb.net", "ns4.rumahweb.net" ] } }, "vt": { "v": 1, "fetched_at": "2026-10-21T21:19:47Z", "analysis_at": "2026-10-19T11:55:37Z", "stats": { "timeout": 0, "harmless": 44, "malicious": 13, "suspicious": 2, "undetected": 33 }, "detections": { "DNS8": "suspicious", "ESET": "suspicious", "VIPRE": "phishing", "G-Data": "phishing", "Lionic": "phishing", "Sophos": "phishing", "CyRadar": "phishing", "Webroot": "malicious", "Fortinet": "phishing", "SOCRadar": "phishing", "Seclookup": "malicious", "BitDefender": "phishing", "Chong Lua Dao": "malicious", "alphaMountain.ai": "phishing", "Forcepoint ThreatSeeker": "phishing" }, "reputation": 0, "registrar": "CV. Rumahweb Indonesia", "created": "2023-12-28T04:37:28Z", "expires": "2026-12-28T23:59:59Z", "updated": "2026-01-09T11:37:21Z", "first_seen": "2023-12-30T08:02:22Z", "dns": [ { "ttl": 14400, "type": "A", "value": "202.10.43.124" }, { "ttl": 14400, "type": "MX", "value": "aplc.site", "priority": 0 }, { "ttl": 21600, "type": "SOA", "rname": "root.kumai.iixcp.rumahweb.net", "value": "ns1.rumahweb.com" }, { "ttl": 4785, "type": "NS", "value": "ns2.rumahweb.com" }, { "ttl": 4785, "type": "NS", "value": "ns3.rumahweb.net" }, { "ttl": 14400, "type": "TXT", "value": "v=spf1 +a +mx +ip4:202.10.43.123 ~all" }, { "ttl": 4785, "type": "NS", "value": "ns1.rumahweb.com" }, { "ttl": 4785, "type": "NS", "value": "ns4.rumahweb.net" } ], "dns_at": "2026-10-19T12:01:05Z", "jarm": "29d29d00029d29d00042d43d00041d598ac0c1012db967bb1ad0ff2491b3ae", "cert": { "san": [ "aplc.site", "aplc.site.arletaconsulting.space", "appbgn.org", "appbgn.org.arletaconsulting.space", "autoconfig.aplc.site", "autoconfig.appbgn.org", "autodiscover.aplc.site", "autodiscover.appbgn.org", "cpanel.aplc.site", "cpanel.appbgn.org" ], "issuer": "Let's Encrypt / YR1", "serial": "5518d41cacb5e2197df626a25a57712c3c7", "sha256": "c80b915ecc5d34d5d7d1ea0003eee2755f7b2befcdfb5b50aeb8bb384f77d0ce", "subject": "www.aplc.site.arletaconsulting.space", "valid_to": "2027-01-09T13:48:31Z", "valid_from": "2026-10-11T13:48:32Z" }, "whois": { "registrar": "CV. Rumahweb Indonesia", "registrar_iana_id": "1675", "registrar_url": "https://www.rumahweb.com", "created": "2023-12-28T04:37:28Z", "updated": "2026-01-09T11:37:21Z", "expires": "2026-12-28T23:59:59Z", "status": [ "ok" ], "nameservers": [ "ns1.rumahweb.com", "ns2.rumahweb.com", "ns3.rumahweb.net", "ns4.rumahweb.net" ], "dnssec": "unsigned" }, "rdap": { "status": [ "ok" ], "events": { "expiration": "2026-12-28T15:59:59Z", "registration": "2023-12-27T21:37:28Z" } } }, "webcheck": { "v": 1, "fetched_at": "2026-10-21T21:21:52Z", "mail_config": { "mx": [ "aplc.site" ], "spf": "v=spf1 +a +mx +ip4:202.10.43.123 ~all", "dkim": [ "default" ], "dmarc": true, "dkim_bits": 2048, "spf_lookups": 2 }, "caa_records": { "domain": "aplc.site" }, "block_lists": { "resolvers": 12, "blocked_by": [ "CloudFlare Family" ], "blocked_count": 1 }, "archives": { "last": "2026-10-21T20:52:31Z", "first": "2025-07-15T04:21:20Z", "changes": 1, "days_archived": 2, "scans_per_day": 0, "avg_page_bytes": 46156 }, "social_tags": { "ogUrl": "https://aplc.site/", "title": "PELANGI888: Pilihan Fitur Hiburan Online untuk Pengunjung Baru", "author": "PELANGI888", "ogType": "product", "robots": "INDEX,FOLLOW", "ogImage": "/img/banner.webp?optimize=low&bg-color=255,255,255&fit=bounds&height=270&width=270&canvas=270:270", "ogTitle": "PELANGI888 | Jalur Praktis Menjelajahi Slot Online dan Game Populer", "keywords": "kaya123, kaya 123, slot gacor, situs slot gacor, slot online, link resmi kaya123, games slot online, slot gacor hari ini, daftar slot online, login kaya123", "description": "Kenali PELANGI888 lewat ulasan tampilan yang ringan, pengalaman di ponsel, dan pilihan hiburan. Temukan informasi game online yang mudah diikuti tanpa istilah yang bikin bingung.", "canonicalUrl": "https://aplc.site/", "ogDescription": "PELANGI888 memudahkan pengguna menjelajahi slot online dan game populer melalui halaman yang terstruktur, menu ringkas, serta akses yang konsisten di berbagai ukuran layar." }, "trackers": { "requests": 182, "trackers": [ { "name": "Branch", "company": "Branch Metrics", "country": "US", "category": "Advertising", "requests": 4 }, { "name": "Google Tag", "company": "Google", "country": "US", "category": "Advertising", "requests": 1 }, { "name": "ShareThis", "company": "ShareThis, Inc.", "country": "US", "category": "Advertising", "requests": 6 }, { "name": "Cloudflare Insights", "company": "Cloudflare", "country": "US", "category": "Site Analytics", "requests": 5 }, { "name": "Google Analytics", "company": "Google", "country": "US", "category": "Site Analytics", "requests": 1 }, { "name": "New Relic", "company": "New Relic", "country": "US", "category": "Site Analytics", "requests": 1 }, { "name": "Google Maps", "company": "Google", "country": "US", "category": "Utilities", "requests": 2 } ] }, "mixed_content": { "no_sri": [ "https://cdn.branch.io/branch-latest.min.js", "https://www.mothercare.co.id/static/version1741963345/frontend/Codilar/mothercare/id_ID/js/kanmo_custom.min.js", "https://www.mothercare.co.id/static/version1741963345/frontend/Codilar/mothercare/id_ID/Kanmo_BookingAppointment/js/product_detail_handler.min.js", "https://js.klevu.com/core/v2/klevu.js", "https://js.klevu.com/theme/default/v2/quick-search-theme.js", "https://www.googletagmanager.com/gtag/js", "https://www.mothercare.co.id/static/version1741963345/frontend/Codilar/mothercare/id_ID/Swissup_Breeze/js/core/extend-ko.min.js", "https://www.mothercare.co.id/static/version1741963345/frontend/Codilar/mothercare/id_ID/Swissup_Breeze/js/core/extend-cash.min.js", "https://www.mothercare.co.id/static/version1741963345/frontend/Codilar/mothercare/id_ID/Swissup_Breeze/js/lib/class.min.js", "https://www.mothercare.co.id/static/version1741963345/frontend/Codilar/mothercare/id_ID/Swissup_Breeze/js/lib/double-tap.min.js" ], "third_party_scripts": 127 }, "status": { "up": true, "code": 200, "timings": { "dns": 1069, "tls": 193, "wait": 193, "connect": 188, "download": 1787 }, "response_ms": 3430 }, "tls_connection": { "alpn": "h2", "cipher": "TLS_AES_256_GCM_SHA384", "protocol": "TLSv1.3", "versions": [ "TLSv1.2", "TLSv1.3" ], "authorized": true, "forward_secrecy": true }, "ports": { "open": [ 21, 25, 80, 110, 143, 443, 587, 993, 995 ] }, "carbon": { "bytes": 545024, "co2_grams": 0.0199, "cleaner_than": 1 }, "dns_server": { "ns": [ { "ip": "157.245.115.90", "host": "ns3.rumahweb.net" }, { "ip": "198.199.101.34", "host": "ns4.rumahweb.net" }, { "ip": "139.162.19.83", "host": "ns1.rumahweb.com" }, { "ip": "68.183.178.111", "host": "ns2.rumahweb.com" } ], "zone": "aplc.site" }, "cookies": { "cookies": [ { "name": "_s", "secure": true, "same_site": "None" }, { "name": "mage-cache-sessid", "secure": true, "same_site": "Strict" }, { "name": "_ga_404GXE7LR3" }, { "name": "_ga" }, { "name": "section_data_ids", "secure": true, "same_site": "Strict" } ] }, "location": { "ip": "202.10.43.124", "asn": "58487", "org": "Rumahweb", "city": "Melati", "country": "ID" }, "ssl": { "issuer": "Let's Encrypt / YR1", "subject": "www.aplc.site.arletaconsulting.space" }, "dns": { "A": [ "202.10.43.124" ], "MX": [ "{\"exchange\": \"aplc.site\", \"priority\": 0}" ], "NS": [ "ns1.rumahweb.com", "ns3.rumahweb.net", "ns4.rumahweb.net", "ns2.rumahweb.com" ], "SOA": "{\"nsname\": \"ns1.rumahweb.com\", \"hostmaster\": \"root.kumai.iixcp.rumahweb.net\", \"serial\": 2026101106, \"refresh\": 3600, \"retry\": 1800, \"expire\": 1209600, \"minttl\": 86400}", "TXT": [ "v=spf1 +a +mx +ip4:202.10.43.123 ~all" ] }, "dnssec": { "ds": false, "rrsig": false, "dnskey": false }, "hsts": { "message": "Site does not serve any HSTS headers." }, "http_security": { "xFrameOptions": false, "referrerPolicy": false, "xXSSProtection": false, "permissionsPolicy": false, "xContentTypeOptions": false, "contentSecurityPolicy": false, "strictTransportPolicy": false, "crossOriginOpenerPolicy": false, "crossOriginEmbedderPolicy": false, "crossOriginResourcePolicy": false }, "get_ip": { "ip": "202.10.43.124", "family": 4 }, "redirects": { "chain": [ "https://aplc.site" ] }, "tech_stack": { "technologies": [ "Magento", "Klevu", "MySQL", "PHP", "Google Maps", "AMP", "Knockout.js", "LiteSpeed", "Cloudflare Browser Insights", "Branch", "Turbolinks", "ShareThis", "New Relic", "lit-html", "lit-element", "Lodash", "Google Analytics", "reCAPTCHA", "Webpack", "Module Federation", "Open Graph", "HTTP/3" ] }, "linked_pages": { "external": [ "https://www.mothercare.co.id/clothing-essentials.html", "https://www.mothercare.co.id/catalogsearch/advanced/", "https://www.mothercare.co.id/payment-method" ], "external_count": 3, "internal_count": 238 }, "whois": { "registrar": "CV. Rumahweb Indonesia", "created": "2023-12-28T04:37:28Z", "updated": "2026-01-09T11:37:21Z", "expires": "2026-12-28T23:59:59Z", "status": [ "ok https://icann.org/epp" ], "nameservers": [ "ns1.rumahweb.com", "ns2.rumahweb.com", "ns3.rumahweb.net", "ns4.rumahweb.net" ] }, "headers": { "headers": { "server": "LiteSpeed", "content-type": "text/html" } } } } ```