Is douvagroup.com a scam? TrustSniffer's high-risk assessment: 0/100

Security Alert

Fortinet flagged this site in external intelligence checks, indicating elevated compromise/scam exposure that requires immediate caution.

This website is a default Indonesian hosting-provider landing page branded IDwebhost, presenting account activation text, basic website-building guidance, domain and hosting promotions, and a telephone contact channel; its apparent business model is the sale of hosting, domain-registration, and related services.

Scam/Impersonation Risk

The site has a critical sensitive-interaction risk posture because independent external reputation checks recorded malicious detections and a confirmed blacklist listing. This is materially more significant than the benign appearance of the homepage: the page shows no login form, credential-harvesting form, wallet connection, or explicit sensitive-data request, and no brand impersonation or conflicting legal-entity identity was observed, but those content-level observations do not offset the external threat findings. The website’s apparent age and historical presence establish continuity of the domain, not the safety of current interaction or the legitimacy of the present content.

Regulatory Verification Notes

The registration record identifies PT Douva Afalla International and lists GKG.Net, Inc. as registrar, while the homepage presents itself as an IDwebhost hosting service. The available identity connection remains unverified, and the landing page is a generic activation or placeholder page rather than a developed corporate or service disclosure page. No licensing claim, licensing authority, or license number is presented in the supplied site content; this is a verification gap, not by itself proof of misconduct. The domain’s transport security is present, but domain-validated encryption confirms an encrypted connection rather than the operator’s legal identity or regulatory standing. The available broker-intelligence dataset contains no match.

What to Verify Next

Before any sensitive interaction, an organization should independently confirm that the intended service operator is the same entity named in the registration record and that the IDwebhost branding is authorized for this domain. Any claimed hosting or domain-registration service should be validated through an independently sourced official support channel, and any applicable licensing or business-registration status should be checked with the relevant Indonesian registry or authority. Credentials, payment details, and other sensitive information should not be submitted until those checks and the external reputation concern have been resolved.

Summary Verdict

The website should be treated as an established-domain but currently untrusted service endpoint. The decisive external reputation contradictions outweigh the otherwise ordinary hosting-page presentation and historical continuity, making sensitive interaction inappropriate absent independent validation and remediation of the reputation findings.

Infrastructure Integrity

The site resolves directly to a single likely origin address rather than operating behind a detected CDN or WAF, with no edge-IP layer identified. This provides limited infrastructure-based mitigation: the transport is encrypted, but the hosting arrangement itself does not establish legitimacy or reduce the significance of the external threat detections.

Closing Assessment

The proportionate course is to limit activity to non-sensitive observation and defer login, credential submission, payment, or other financial interaction until independent operator validation and security clearance are complete.