Notification and current-status evidence
The sent-report ledger records the first outgoing report at . It contains 2 outgoing records; the latest is dated . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
shortpro[.]co[.]id
“Beranda - ShortPro”
Observación almacenada
Contraste de títulos observado
Resumen de las pruebas
The domain shortpro.co.id is currently active and resolves to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Registration records show the domain was created on March 12, 2026 through the registrar PT JC Indonesia. The site presents a valid HTTPS certificate issued by Google Trust Services under the WE1 label, and the web server returns HTTP status code 200, confirming that the site is reachable. Technical fingerprinting indicates a WordPress stack backed by MySQL and PHP, with front‑end components such as particles.js, Bootstrap, Yoast SEO, Trustpilot, and Swiper, all of which are commonly used to add perceived credibility to malicious pages. The page title returned by the server is "Beranda - ShortPro," suggesting the site may be attempting to masquerade as a legitimate ShortPro service, although no further brand evidence is supplied.
Security telemetry shows the domain appears on one external blocklist and has been listed by PhishDestroy, indicating that at least one security community has identified it as a phishing threat. VirusTotal analysis reports a single vendor flag out of 94 scans, providing a low‑confidence indicator of malicious behavior. The Gridinsoft trust score of 35 out of 100 further reflects a poor reputation. Nameserver configuration uses Cloudflare's alan.ns.cloudflare.com and daisy.ns.cloudflare.com, which is consistent with the observed hosting provider.
Uncertainty remains regarding the exact payload or credential‑collection mechanisms employed, as no content analysis or sandbox execution results are available. Defenders should therefore treat shortpro.co.id as a high‑risk indicator. Recommended mitigation steps include adding the domain to DNS blocklists, configuring proxy or web‑gateway filters to block HTTP/HTTPS requests to the host, monitoring outbound traffic for connections to 188.114.96.
Instantánea de evidencia enviada
- Enviado
- Registros del libro
- 1
- ID del caso
PD-1774199605-shortpro.co.id- Artefacto PDF
- Evidencia en PDF
Historial de reportes 2
- Reporte 1 Phishing Abuse Report: shortpro[.]co[.]id
- Reporte 2 ⚠️ ESCALATION #2 (212h active): Phishing - shortpro[.]co[.]id
Data Coverage
Inteligencia de seguridad de red
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | maps.googleapis.com/maps-api-v3/api/js/64/7d/common.js |
audit | Hunting_JS_WebAssembly |
Proceso de respuesta ante amenazas Pipeline
Cobertura de listas de bloqueo
10 fuentes externas supervisadas · instantánea del 11/08/2026
10 fuentes externas supervisadas Sin coincidencias
Análisis de VirusTotal
Análisis del rendimiento del sitio
Google PageSpeed Insights — mobile performance audit of shortpro.co.id · checked Mar 12, 2026
¿Te ha afectado esta página web?
Si ingresó credenciales de cuenta, información personal o de pago, o descargó un archivo de este dominio, tome medidas inmediatas. A continuación encontrará recursos que le ayudarán a informar el incidente y protegerse.
Informa a las autoridades locales
Seleccione su país para obtener contactos oficiales de cibercrimen o crear un borrador de queja →.
Comprobar cualquier dominio
Análisis de amenazas utilizando listas de bloqueo almacenadas, WHOIS, DNS y evidencia de escaneo público
Escanear ahoraDenunciar un intento de phishing
Envía los dominios sospechosos a nuestra base de datos de amenazas: protege a la comunidad
DenunciarFlujo de amenazas en tiempo real
Informes de phishing recientes y cambios de disponibilidad observados
MonitorizarMantente informado, mantente a salvo
Supervisa las amenazas en tiempo real o impugna esta entrada si crees que se trata de un falso positivo.