Notification and current-status evidence
The sent-report ledger records the first outgoing report at .
It contains 2 outgoing records; the latest is dated . The recorded recipient is abuse@pandi.id.
The latest stored availability evidence still shows the domain reachable; 4 months has elapsed since the first outgoing report.
ICANN RAA §3.18 describes registrar abuse-contact and handling obligations. This section records outgoing timestamps, listed recipients, case identifiers, and later availability. It does not by itself prove receipt, acknowledgement, investigation, remediation, or contractual non-compliance.
shortpro[.]co[.]id
“Beranda - ShortPro”
shortpro.co.id — Não verificado. Tipo de golpe: Generic Phishing. Resumo das evidências: VirusTotal 13/91 (ADMINUSLabs, alphaMountain.ai, BitDefender, Chong Lua Dao, CRDF); URLQuery 1 alert; PhishDestroy score 89/100. Registrador: PT JC Indonesia.
A análise detalhada do PhishDestroy AI permanece em inglês para preservar o registro forense original.
The domain shortpro.co.id is currently active and resolves to the IP address 188.114.96.3, which belongs to AS13335 Cloudflare, Inc. and is geolocated in the United States. Registration records show the domain was created on March 12, 2026 through the registrar PT JC Indonesia. The site presents a valid HTTPS certificate issued by Google Trust Services under the WE1 label, and the web server returns HTTP status code 200, confirming that the site is reachable. Technical fingerprinting indicates a WordPress stack backed by MySQL and PHP, with front‑end components such as particles.js, Bootstrap, Yoast SEO, Trustpilot, and Swiper, all of which are commonly used to add perceived credibility to malicious pages. The page title returned by the server is "Beranda - ShortPro," suggesting the site may be attempting to masquerade as a legitimate ShortPro service, although no further brand evidence is supplied.
Security telemetry shows the domain appears on one external blocklist and has been listed by PhishDestroy, indicating that at least one security community has identified it as a phishing threat. VirusTotal analysis reports a single vendor flag out of 94 scans, providing a low‑confidence indicator of malicious behavior. The Gridinsoft trust score of 35 out of 100 further reflects a poor reputation. Nameserver configuration uses Cloudflare's alan.ns.cloudflare.com and daisy.ns.cloudflare.com, which is consistent with the observed hosting provider.
Uncertainty remains regarding the exact payload or credential‑collection mechanisms employed, as no content analysis or sandbox execution results are available. Defenders should therefore treat shortpro.co.id as a high‑risk indicator. Recommended mitigation steps include adding the domain to DNS blocklists, configuring proxy or web‑gateway filters to block HTTP/HTTPS requests to the host, monitoring outbound traffic for connections to 188.114.96.
Inteligência de segurança de rede
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| Private YARA rules | maps.googleapis.com/maps-api-v3/api/js/64/7d/common.js |
audit | Hunting_JS_WebAssembly |
Pipeline de resposta a ameaças
Status da lista de bloqueios pública
Histórico de denúncias de abuso · 2 stored reports over 9 days · click to expand
-
Report #1 Mar 22, 2026 · 20:13 UTCPhishing Abuse Report: shortpro[.]co[.]idabuse@pandi.id
-
Report #2 ICANN CC 212h still active Mar 31, 2026 · 16:55 UTCESCALATION #2 (212h active): Phishing - shortpro[.]co[.]idabuse@pandi.id compliance@icann.org
Tecnologias · 16 identified
Open-source CMS powering over 40% of websites worldwide.
Open-source relational database management system.
Server-side scripting language designed for web development.
Popular CSS framework for responsive, mobile-first web development.
Modern mobile touch slider with hardware-accelerated transitions.
Plugin to detect and restore deprecated jQuery features.
Fast, small JavaScript library simplifying HTML manipulation, event handling, and Ajax.
Tag management system for deploying marketing and analytics tags.
tagmanager.google.comWeb analytics service tracking website traffic and user behavior.
marketingplatform.google.comPerformance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
Análise do VirusTotal
Análise de desempenho do site
Google PageSpeed Insights — mobile performance audit of shortpro.co.id · checked Mar 12, 2026
Análise da configuração do site
Evidências e relatórios externos
PD-1774199605-shortpro.co.id Recipient: abuse@pandi.id Você foi afetado por este site?
Se você inseriu credenciais de conta, informações pessoais ou de pagamento, ou baixou um arquivo deste domínio, tome medidas imediatas. Abaixo estão os recursos para ajudá-lo a relatar o incidente e se proteger.
Notifique as autoridades locais
Selecione seu país para obter contactos oficiais do cibercrime ou crie um rascunho de reclamação →.
Verificar qualquer domínio
Análise de ameaças usando lista de bloqueio armazenada, WHOIS, DNS e evidências de verificação pública
Digitalize agoraDenunciar phishing
Envie domínios suspeitos para nosso banco de dados de ameaças — proteja a comunidade
DenunciarFeed de ameaças em tempo real
Relatórios recentes de phishing e alterações de disponibilidade observadas
MonitorarMantenha-se informado, mantenha-se seguro
Monitore ameaças em tempo real ou conteste esta listagem caso acredite que se trate de um falso positivo