# microsoftindonesia.com — Recorded security evidence | PhishDestroy

Content language: English
Canonical HTML report: https://phishdestroy.io/domain/microsoftindonesia.com/
Machine-readable companion: https://phishdestroy.io/domain/microsoftindonesia.com/llm.txt

## Summary

PhishDestroy stores a threat-intelligence record for this domain.
This document reports the latest stored fields; it is not a real-time guarantee of availability or safety.

## Stored observations

- Listed by PhishDestroy: yes
- Availability at last stored check: Last known active
- First observed by PhishDestroy: 2026-11-09 19:02:11 UTC
- Selected availability observation: 2026-11-09T19:02:11Z
- Stored record updated: 2026-11-09 21:06:33 UTC
- VirusTotal detections in the stored snapshot: 0/92
- Independent public blocklist matches in the stored snapshot: 0
- Google Safe Browsing stored result: checked_clean

## Stored labels and detections

- Automated brand label (collector metadata; not a confirmed impersonation finding): Microsoft

## Stored infrastructure

- Observed IP address: 188.114.96.3
- Registrar in stored WHOIS data: Dynadot Inc
- Last stored HTTP status: 301 (observed: 2026-11-09T19:02:11Z)

## Evidence links

- URLScan report: https://urlscan.io/result/01a1c1ae-9cd7-7570-ba7b-72488313ccc9/
- VirusTotal domain view: https://www.virustotal.com/gui/domain/microsoftindonesia.com
- Certificate Transparency search: https://crt.sh/?q=%25.microsoftindonesia.com
- Web Archive lookup: https://web.archive.org/web/*/https://microsoftindonesia.com/

## Corrections

- Appeal or correct this record: https://phishdestroy.io/appeals/
- Methodology and help: https://phishdestroy.io/faq

## Public report package

PhishDestroy stores a record for microsoftindonesia.com. Source observations are dated separately; missing checks do not establish safety.

PhishDestroy stores a record for microsoftindonesia.com. Source observations are dated separately; missing checks do not establish safety.

A reviewed analysis is not available for this text revision. Consult the dated source records below.
Package revision: 0c50b4b99e8878b5a3ffdc16b9c2c6565348ffbbdcb47a4d07606ada2e685b0d
Source facts (timestamps as stored): {"record_id":1884301,"first_recorded_at":"2026-11-09 20:02:11","virustotal":{"source":"VirusTotal","scope":"unknown","result_state":"complete","numerator":0,"denominator":92,"malicious":0,"suspicious":0,"vendors":null,"observed_at":"2026-11-09T01:17:14Z","checked_at":null,"fetched_at":"2026-11-09T20:04:36Z","time_basis":"UTC (provider ISO timestamps)","stored_summary":{"source":"VirusTotal","scope":"unknown","result_state":"observed","numerator":0,"denominator":92,"malicious":null,"suspicious":null,"vendors":[],"observed_at":"2026-11-09 01:17:14","checked_at":"2026-11-09 21:04:36","fetched_at":"2026-11-09 20:04:36","time_basis":"as stored; legacy timezone not established"},"record_source":"phishdestroy.technologies.vt","vendor_labels":[],"vendor_names":[],"stats":{"timeout":0,"harmless":56,"malicious":0,"suspicious":0,"undetected":36}},"google_safe_browsing":{"source":"Google Safe Browsing","state":"checked_clean","verdict":0,"checked_at":"2026-11-09 22:06:06"},"spamhaus":{"source":"Spamhaus","verdict":null,"checked_at":null},"availability":{"state":"alive","label_key":"availability.active","detail_key":"detail.latest_reachability","params":[],"source":"current_http_probe","record_id":1884301,"scope":"checked_url","observed_at":"2026-11-09T19:02:11Z","http_status":301,"http_observed_at":"2026-11-09T19:02:11Z","stored_http_code":301,"stored_http_observed_at":"2026-11-09T19:02:11Z","legacy_site_status":"alive","supports_outcome_badge":false,"content_classification":"unknown","content_classification_at":null,"registration_state":"unknown","policy":"20261102-dated-availability-v2"}}

## Stored page captures

- URLScan · 2026-11-09: https://screenshots.phishdestroy.io/us/01a1c1ae-9cd7-7570-ba7b-72488313ccc9.png
  Captured: 2026-11-09 19:00:22 UTC
  Source report: https://urlscan.io/result/01a1c1ae-9cd7-7570-ba7b-72488313ccc9/
  SHA-256: 0c287ebc2532db55ddbef9676dd4eafc438a86e7ae77a2cea25bdf3b35690110

## Collected source observations

Provider observations retain their own timestamps. Capture links do not establish image content. Shared infrastructure does not identify an operator.
```json
{
    "urlscan": {
        "v": 1,
        "fetched_at": "2026-11-09T19:04:34Z",
        "uuid": "01a1c1ae-9cd7-7570-ba7b-72488313ccc9",
        "scanned_at": "2026-11-09T19:00:22Z",
        "final_url": "https://www.microsoftindonesia.com/situskoleksigame",
        "status": 200,
        "redirected": "parent-domain",
        "redirects": [
            {
                "to": "https://www.microsoftindonesia.com/situskoleksigame",
                "from": "https://microsoftindonesia.com/",
                "status": 301
            }
        ],
        "ip": "188.114.96.3",
        "domains": [
            "www.mothercare.co.id",
            "js.klevu.com",
            "static.cloudflareinsights.com",
            "api2.branch.io",
            "ipv6check.ksearchnet.com",
            "platform-cdn.sharethis.com",
            "ipv4check.ksearchnet.com",
            "visitor.service.ksearchnet.com",
            "l.sharethis.com",
            "statsjs.klevu.com",
            "platform-api.sharethis.com",
            "js-agent.newrelic.com",
            "maps.googleapis.com",
            "app.link",
            "region1.google-analytics.com",
            "buttons-config.sharethis.com",
            "cdn.branch.io",
            "maps.google.com",
            "www.googletagmanager.com",
            "microsoftindonesia.com"
        ],
        "ips": [
            "2602:816:5001::39",
            "2600:9000:2491:4e00:11:f728:3040:93a1",
            "2001:4860:4843:400::",
            "2001:41d0:202:100:145:239:192:227",
            "13.35.58.60",
            "2600:9000:213f:8400:19:9934:6a80:93a1",
            "2001:4860:4802:32::36",
            "145.239.193.91",
            "34.252.250.46",
            "3.122.70.127",
            "2600:9000:20a2:a800:c:abe:f440:93a1",
            "108.138.26.116",
            "2606:4700::6810:4f49",
            "2a00:1450:4001:c15::65",
            "3.160.150.115"
        ],
        "asns": [
            "54113",
            "16509",
            "15169",
            "16276",
            "13335"
        ],
        "countries": [
            "US",
            "FR",
            "IE",
            "DE"
        ],
        "link_domains": [
            "www.mothercare.co.id",
            "koleksi.microsoftindonesia.com"
        ],
        "doc_hash": "b17069851628a92e199f1408a59813d9a70cd38feb6162fc8370bdf0b12af607",
        "globals": [
            "LOCALE",
            "BASE_URL",
            "VIEW_URL",
            "required",
            "require",
            "NREUM",
            "webpackChunk:NRBA-1.284.1.PROD",
            "newrelic",
            "branch",
            "klevu_lang",
            "klevu_baseCurrencyCode",
            "klevu_currentCurrencyCode",
            "klevu_pubIsInUse",
            "klevu_current_version",
            "_klvWebhook",
            "_klvReady",
            "klevu",
            "_klvAnalyticsCollect",
            "_klvAnalyticsEvent",
            "klevu_addPriceSuffixToQueryControl",
            "klevu_currencySymbols",
            "klevu_priceFormatters",
            "klevu_urlProtocol",
            "klevu_javascriptDomain",
            "klevunoUiSlider",
            "noUiSlider",
            "wNumb",
            "gtag",
            "dataLayer",
            "nowUnixtime",
            "klevufejs_getCookie",
            "klevufejs_cookie",
            "klevuData",
            "xhttp",
            "cookiesConfig",
            "googleMapsConfig",
            "checkout",
            "st",
            "__stdos__",
            "__sharethis__docReady"
        ],
        "cookies": [
            "mage-cache-sessid",
            "_ga_404GXE7LR3",
            "_ga",
            "section_data_ids",
            "_s"
        ],
        "storage_keys": [
            "test",
            "__sharethis_local_storage_test__",
            "klv_kmcData_klevu-159060263433311987",
            "klv_user_klevu-159060263433311987_klvDataProtected",
            "klv_user_klevu-159060263433311987_sessionInfo",
            "klv_user_klevu-159060263433311987_connectorInfo",
            "klv_user_klevu-159060263433311987_segmentInfo",
            "klv_user_klevu-159060263433311987_segments",
            "klv_user_klevu-159060263433311987_lastSend",
            "klv_user_klevu-159060263433311987_ipv4",
            "klv_user_klevu-159060263433311987_ipv6",
            "klv_user_klevu-159060263433311987_uuid",
            "klv_user_klevu-159060263433311987_lastSendIp",
            "mage-cache-storage",
            "__sak"
        ],
        "tls": {
            "san": [
                "*.microsoftindonesia.com",
                "microsoftindonesia.com"
            ],
            "cipher": "AES_128_GCM",
            "issuer": "YE2",
            "subject": "microsoftindonesia.com",
            "protocol": "QUIC",
            "valid_to": "2027-02-06T06:50:52Z",
            "valid_from": "2026-11-08T06:50:53Z"
        },
        "domain_age_days": 2347,
        "apex_age_days": 2347,
        "tls_age_days": 1,
        "tls_valid_days": 89,
        "requests": 200,
        "verdicts": {
            "engines": {
                "tags": [
                    "urlscan-ml",
                    "urlscan-ml-2aab354"
                ],
                "score": 15,
                "malicious": true
            },
            "overall": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "genericgambling"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            },
            "urlscan": {
                "tags": [
                    "phishing"
                ],
                "score": 100,
                "brands": [
                    "Generic Gambling"
                ],
                "malicious": true,
                "categories": [
                    "phishing"
                ]
            }
        },
        "headers": {
            "server": "cloudflare",
            "priority": "u=0,i"
        }
    },
    "vt": {
        "v": 1,
        "fetched_at": "2026-11-09T20:04:36Z",
        "analysis_at": "2026-11-09T01:17:14Z",
        "stats": {
            "timeout": 0,
            "harmless": 56,
            "malicious": 0,
            "suspicious": 0,
            "undetected": 36
        },
        "reputation": 0,
        "categories": {
            "Forcepoint ThreatSeeker": "information technology"
        },
        "popularity": {
            "Alexa": 638406,
            "Statvoo": 492168
        },
        "created": "2019-02-01T00:00:00Z",
        "updated": "2026-02-02T00:00:00Z",
        "first_seen": "2024-03-06T04:42:06Z",
        "dns": [
            {
                "ttl": 300,
                "type": "A",
                "value": "172.67.186.124"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::6815:138f"
            },
            {
                "ttl": 300,
                "type": "A",
                "value": "104.21.19.143"
            },
            {
                "ttl": 1800,
                "type": "SOA",
                "rname": "dns.cloudflare.com",
                "value": "natasha.ns.cloudflare.com"
            },
            {
                "ttl": 300,
                "type": "AAAA",
                "value": "2606:4700:3033::ac43:ba7c"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "seth.ns.cloudflare.com"
            },
            {
                "ttl": 21600,
                "type": "NS",
                "value": "natasha.ns.cloudflare.com"
            }
        ],
        "dns_at": "2026-11-09T01:17:28Z",
        "jarm": "27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c",
        "cert": {
            "san": [
                "*.microsoftindonesia.com",
                "microsoftindonesia.com"
            ],
            "issuer": "Let's Encrypt / YE2",
            "serial": "56620f47443a76bba8314053e7be27cf9be",
            "sha256": "b4d4b7e46e546a860004f460628f60243106b7e094960401bd70c556d3f756a4",
            "subject": "microsoftindonesia.com",
            "valid_to": "2027-02-06T06:50:52Z",
            "valid_from": "2026-11-08T06:50:53Z"
        },
        "whois": [],
        "rdap": {
            "status": [
                "transfer prohibited"
            ],
            "events": {
                "expiration": "2027-11-08T07:45:28Z",
                "last changed": "2026-11-08T07:47:07Z",
                "registration": "2026-11-08T07:45:28Z",
                "registrar expiration": "2027-11-08T07:45:28Z",
                "last update of RDAP database": "2026-11-08T07:53:30Z"
            },
            "registrar": "DYNADOT LLC",
            "registrar_iana_id": "472"
        }
    },
    "webcheck": {
        "v": 1,
        "fetched_at": "2026-11-09T19:32:14Z",
        "mail_config": {
            "spf_lookups": 0
        },
        "block_lists": {
            "resolvers": 12,
            "blocked_count": 0
        },
        "archives": {
            "last": "2024-06-14T15:27:03Z",
            "first": "2003-11-18T18:35:59Z",
            "changes": 33,
            "days_archived": 51,
            "scans_per_day": 0.01,
            "avg_page_bytes": 7862
        },
        "sitemap": {
            "present": true,
            "url_count": 1
        },
        "social_tags": {
            "ogUrl": "https://www.microsoftindonesia.com/situskoleksigame",
            "title": "SEKOLAHTOTO: Koleksi Game Toto, Slot, dan Casino Pakai Link Gacor MicroSoftIndonesia.com",
            "author": "SEKOLAHTOTO",
            "ogType": "product",
            "robots": "INDEX,FOLLOW",
            "ogImage": "https://www.microsoftindonesia.com/sekolahtoto/Koleksi-Game-Toto-Slot-dan-Casino-Pakai-Link-Gacor-Sekolahtoto.webp",
            "ogTitle": "SEKOLAHTOTO: Koleksi Game Toto, Slot, dan Casino Pakai Link Gacor MicroSoftIndonesia.com",
            "keywords": "sekolahtoto, sekolah toto, situs togel, togel 4d, togel, toto 4d, situs toto sekolahtoto togel, sekolahtoto login, sekolahtoto slot, sekolahtoto 4d",
            "description": "SEKOLAHTOTO hadir sebagai pilihan bagi pengguna yang mencari beragam permainan toto, slot, dan casino online dalam satu platform. Melalui akses MicroSoftIndonesia.com, pengguna dapat menemukan koleksi game dengan tampilan modern, navigasi sederhana, serta informasi permainan yang disusun agar lebih ",
            "canonicalUrl": "https://www.microsoftindonesia.com/situskoleksigame",
            "ogDescription": "SEKOLAHTOTO hadir sebagai pilihan bagi pengguna yang mencari beragam permainan toto, slot, dan casino online dalam satu platform. Melalui akses MicroSoftIndonesia.com, pengguna dapat menemukan koleksi game dengan tampilan modern, navigasi sederhana, serta informasi permainan yang disusun agar lebih "
        },
        "trackers": {
            "requests": 152,
            "trackers": [
                {
                    "name": "Branch",
                    "company": "Branch Metrics",
                    "country": "US",
                    "category": "Advertising",
                    "requests": 1
                },
                {
                    "name": "Google Tag",
                    "company": "Google",
                    "country": "US",
                    "category": "Advertising",
                    "requests": 1
                },
                {
                    "name": "ShareThis",
                    "company": "ShareThis, Inc.",
                    "country": "US",
                    "category": "Advertising",
                    "requests": 1
                },
                {
                    "name": "Cloudflare Insights",
                    "company": "Cloudflare",
                    "country": "US",
                    "category": "Site Analytics",
                    "requests": 2
                },
                {
                    "name": "New Relic",
                    "company": "New Relic",
                    "country": "US",
                    "category": "Site Analytics",
                    "requests": 1
                },
                {
                    "name": "Google Maps",
                    "company": "Google",
                    "country": "US",
                    "category": "Utilities",
                    "requests": 1
                }
            ]
        },
        "mixed_content": {
            "no_sri": [
                "https://www.mothercare.co.id/static/version1741963345/frontend/Codilar/mothercare/id_ID/js/kanmo_custom.min.js",
                "https://www.mothercare.co.id/static/version1741963345/frontend/Codilar/mothercare/id_ID/Kanmo_BookingAppointment/js/product_detail_handler.min.js",
                "https://js.klevu.com/core/v2/klevu.js",
                "https://js.klevu.com/theme/default/v2/quick-search-theme.js",
                "https://www.googletagmanager.com/gtag/js",
                "https://www.mothercare.co.id/static/version1741963345/frontend/Codilar/mothercare/id_ID/Swissup_Breeze/js/core/extend-ko.min.js",
                "https://www.mothercare.co.id/static/version1741963345/frontend/Codilar/mothercare/id_ID/Swissup_Breeze/js/core/extend-cash.min.js",
                "https://www.mothercare.co.id/static/version1741963345/frontend/Codilar/mothercare/id_ID/Swissup_Breeze/js/lib/class.min.js",
                "https://www.mothercare.co.id/static/version1741963345/frontend/Codilar/mothercare/id_ID/Swissup_Breeze/js/lib/double-tap.min.js",
                "https://www.mothercare.co.id/static/version1741963345/frontend/Codilar/mothercare/id_ID/Swissup_Breeze/js/core/globals.min.js"
            ],
            "third_party_scripts": 123
        },
        "status": {
            "up": true,
            "code": 301,
            "timings": {
                "dns": 18,
                "tls": 23,
                "wait": 46,
                "connect": 6,
                "download": 0
            },
            "response_ms": 93
        },
        "tls_connection": {
            "alpn": "h2",
            "cipher": "TLS_AES_256_GCM_SHA384",
            "protocol": "TLSv1.3",
            "versions": [
                "TLSv1",
                "TLSv1.1",
                "TLSv1.2",
                "TLSv1.3"
            ],
            "authorized": true,
            "forward_secrecy": true
        },
        "ports": {
            "open": [
                80,
                443,
                8080
            ]
        },
        "carbon": {
            "bytes": 401870,
            "co2_grams": 0.0147,
            "cleaner_than": 1
        },
        "dns_server": {
            "ns": [
                {
                    "ip": "173.245.59.142",
                    "host": "seth.ns.cloudflare.com"
                },
                {
                    "ip": "172.64.34.117",
                    "host": "natasha.ns.cloudflare.com"
                }
            ],
            "zone": "microsoftindonesia.com"
        },
        "location": {
            "ip": "2a06:98c1:3120::3",
            "asn": "13335",
            "org": "CloudFLARENET-EU",
            "city": "London",
            "country": "GB"
        },
        "ssl": {
            "issuer": "Let's Encrypt / YE2",
            "subject": "microsoftindonesia.com"
        },
        "dns": {
            "A": [
                "188.114.96.3",
                "188.114.97.3"
            ],
            "NS": [
                "natasha.ns.cloudflare.com",
                "seth.ns.cloudflare.com"
            ],
            "SOA": "{\"nsname\": \"natasha.ns.cloudflare.com\", \"hostmaster\": \"dns.cloudflare.com\", \"serial\": 2419616237, \"refresh\": 10000, \"retry\": 2400, \"expire\": 604800, \"minttl\": 1800}",
            "AAAA": [
                "2a06:98c1:3121::3",
                "2a06:98c1:3120::3"
            ]
        },
        "dnssec": {
            "ds": false,
            "rrsig": false,
            "dnskey": false
        },
        "hsts": {
            "message": "Site does not serve any HSTS headers."
        },
        "http_security": {
            "xFrameOptions": false,
            "referrerPolicy": false,
            "xXSSProtection": false,
            "permissionsPolicy": false,
            "xContentTypeOptions": false,
            "contentSecurityPolicy": false,
            "strictTransportPolicy": false,
            "crossOriginOpenerPolicy": false,
            "crossOriginEmbedderPolicy": false,
            "crossOriginResourcePolicy": false
        },
        "firewall": {
            "waf": "Cloudflare",
            "has_waf": true
        },
        "get_ip": {
            "ip": "2a06:98c1:3120::3",
            "family": 6
        },
        "redirects": {
            "chain": [
                "https://microsoftindonesia.com",
                "https://www.microsoftindonesia.com/situskoleksigame"
            ],
            "count": 1
        },
        "social_presence": {
            "profiles": [
                "https://x.com/SEKOLAHTOTO"
            ]
        },
        "linked_pages": {
            "external": [
                "https://www.microsoftindonesia.com/situskoleksigame",
                "https://koleksi.microsoftindonesia.com/game",
                "https://www.mothercare.co.id/clothing-essentials.html",
                "https://www.mothercare.co.id/catalogsearch/advanced/",
                "https://www.mothercare.co.id/payment-method"
            ],
            "external_count": 5,
            "internal_count": 237
        },
        "whois": {
            "registrar": "Dynadot Inc",
            "created": "2026-11-08T07:45:28Z",
            "updated": "2026-11-08T07:47:07Z",
            "expires": "2027-11-08T07:45:28Z",
            "status": [
                "clientTransferProhibited https://icann.org/epp"
            ],
            "nameservers": [
                "natasha.ns.cloudflare.com",
                "seth.ns.cloudflare.com"
            ]
        },
        "headers": {
            "headers": {
                "server": "cloudflare"
            }
        }
    }
}
```

## Complete dated records
Availability observations: https://phishdestroy.io/domain/microsoftindonesia.com/records.json?source=availability&format=json
Source observation history: https://phishdestroy.io/domain/microsoftindonesia.com/records.json?source=detections&format=json
PhishStats records: https://phishdestroy.io/domain/microsoftindonesia.com/records.json?source=phishstats&format=json
Sent report records: https://phishdestroy.io/domain/microsoftindonesia.com/records.json?source=sent_reports&format=json
Report history: https://phishdestroy.io/domain/microsoftindonesia.com/records.json?source=report_history&format=json
Repeat report records: https://phishdestroy.io/domain/microsoftindonesia.com/records.json?source=rereports&format=json
Follow-up records: https://phishdestroy.io/domain/microsoftindonesia.com/records.json?source=followups&format=json
Content observations: https://phishdestroy.io/domain/microsoftindonesia.com/records.json?source=content&format=json

## Dated availability observation
Latest stored reachability observation
```json
{
    "state": "alive",
    "label_key": "availability.active",
    "detail_key": "detail.latest_reachability",
    "params": [],
    "source": "current_http_probe",
    "record_id": 1884301,
    "scope": "checked_url",
    "observed_at": "2026-11-09T19:02:11Z",
    "http_status": 301,
    "http_observed_at": "2026-11-09T19:02:11Z",
    "stored_http_code": 301,
    "stored_http_observed_at": "2026-11-09T19:02:11Z",
    "legacy_site_status": "alive",
    "supports_outcome_badge": false,
    "content_classification": "unknown",
    "content_classification_at": null,
    "registration_state": "unknown",
    "policy": "20261102-dated-availability-v2"
}
```