Notification and current-status evidence
The sent-report ledger records the first outgoing report at . It contains 2 outgoing records; the latest is dated . A report was sent to the recorded registrar; contact details remain in Domain Intelligence. The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
shortpro[.]co[.]id
“Beranda - ShortPro”
Observation enregistrée
Contraste de titres observé
Résumé des preuves
The domain shortpro.co.id is currently active and resolves to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Registration records show the domain was created on March 12, 2026 through the registrar PT JC Indonesia. The site presents a valid HTTPS certificate issued by Google Trust Services under the WE1 label, and the web server returns HTTP status code 200, confirming that the site is reachable. Technical fingerprinting indicates a WordPress stack backed by MySQL and PHP, with front‑end components such as particles.js, Bootstrap, Yoast SEO, Trustpilot, and Swiper, all of which are commonly used to add perceived credibility to malicious pages. The page title returned by the server is "Beranda - ShortPro," suggesting the site may be attempting to masquerade as a legitimate ShortPro service, although no further brand evidence is supplied.
Security telemetry shows the domain appears on one external blocklist and has been listed by PhishDestroy, indicating that at least one security community has identified it as a phishing threat. VirusTotal analysis reports a single vendor flag out of 94 scans, providing a low‑confidence indicator of malicious behavior. The Gridinsoft trust score of 35 out of 100 further reflects a poor reputation. Nameserver configuration uses Cloudflare's alan.ns.cloudflare.com and daisy.ns.cloudflare.com, which is consistent with the observed hosting provider.
Uncertainty remains regarding the exact payload or credential‑collection mechanisms employed, as no content analysis or sandbox execution results are available. Defenders should therefore treat shortpro.co.id as a high‑risk indicator. Recommended mitigation steps include adding the domain to DNS blocklists, configuring proxy or web‑gateway filters to block HTTP/HTTPS requests to the host, monitoring outbound traffic for connections to 188.114.96.
Instantané des preuves transmises
- Envoyé
- Entrées du registre
- 1
- ID du dossier
PD-1774199605-shortpro.co.id- Artefact PDF
- Preuve PDF
Historique des signalements 2
- Signalement 1 Phishing Abuse Report: shortpro[.]co[.]id
- Signalement 2 ⚠️ ESCALATION #2 (212h active): Phishing - shortpro[.]co[.]id
Data Coverage
Renseignements sur la sécurité réseau
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | maps.googleapis.com/maps-api-v3/api/js/64/7d/common.js |
audit | Hunting_JS_WebAssembly |
Processus de réponse aux menaces Pipeline
Couverture des listes de blocage
10 sources externes surveillées · instantané du 12/08/2026
10 sources externes surveillées Aucune correspondance
Analyse VirusTotal
Analyse des performances du site
Google PageSpeed Insights — mobile performance audit of shortpro.co.id · checked Mar 12, 2026
Ce site vous a-t-il affecté ?
Si vous avez saisi des informations d'identification de compte, des informations personnelles ou de paiement, ou téléchargé un fichier à partir de ce domaine, agissez immédiatement. Vous trouverez ci-dessous des ressources pour vous aider à signaler l'incident et à vous protéger.
Signalez-le à vos autorités locales
Sélectionnez votre pays pour obtenir contacts officiels en matière de cybercriminalité ou créer un projet de plainte →.
Vérifier n'importe quel domaine
Analyse des menaces à l'aide de listes de blocage stockées, de WHOIS, de DNS et de preuves d'analyse publique
Scanner maintenantSignaler une tentative d'hameçonnage
Signalez les domaines suspects à notre base de données des menaces — protégez la communauté
SignalerFlux d'alertes en temps réel
Rapports de phishing récents et changements de disponibilité observés
SurveillerRestez informés, restez en sécurité
Surveillez les menaces en temps réel ou signalez cette alerte si vous pensez qu'il s'agit d'un faux positif