No threats detected
All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.
Is fp.bpjs-kesehatan.go.id legit or a scam?
Official Indonesian government health insurance API subdomain for biometric fingerprint validation; 890 days old, clean reputation, no fraud indicators.
Analysis Summary
MT Intelligence
fp.bpjs-kesehatan.go.id is a confirmed subdomain of bpjs-kesehatan.go.id, the official website of BPJS Kesehatan (Indonesia's national health insurance body). Our research found the endpoint /finger-rest explicitly documented in multiple official installation manuals, hospital software guides, and GitHub repositories as the required webservice URL for fingerprint biometric registration within the JKN (Jaminan Kesehatan Nasional) program. The domain is 890 days old, hosted on a clean IP with zero abuse reports, and carries zero detections from our antivirus network. No scam reports, complaints, or negative mentions appear in any search results. The page returns a 503 error or JavaScript-required message, which is consistent with it being a backend API rather than a public-facing website — this is expected behaviour for an internal government webservice.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for fp.bpjs-kesehatan.go.id, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- fp.bpjs-kesehatan.go.id is a subdomain of the official Indonesian government health insurance agency BPJS Kesehatan (bpjs-kesehatan.go.id).
- The endpoint /finger-rest is repeatedly referenced in official installation guides, hospital software (Anjungan Mandiri/SEP), and GitHub repos as the webservice URL for fingerprint (sidik jari) biometric registration and validation in BPJS
- Multiple PDF manuals (Scribd, PDFCoffee) for "Aplikasi Sidik Jari BPJS Kesehatan" and hospital implementations explicitly list https://fp.bpjs-kesehatan.go.id/finger-rest as the required Web Service URL.
- The page itself returns a "JavaScript must be enabled" message or 503 error, consistent with it being a backend API/webservice rather than a public-facing site.
- BPJS Kesehatan maintains multiple official subdomains (web.bpjs-kesehatan.go.id for login, aman jkn, data.bpjs-kesehatan.go.id, etc.) and actively warns about impersonation scams, but no reports link this specific subdomain to fraud.
- Domain age of 890 days aligns with ongoing biometric transformation program for JKN (Jaminan Kesehatan Nasional) participants.
- No scam reports, complaints, or negative mentions found in searches for the exact domain combined with scam/penipuan/phishing terms.
Subdomain of official government agency BPJS Kesehatan (Badan Penyelenggara Jaminan Sosial Kesehatan)
We searched scam-report databases, consumer-review sites, and general web sources for fp.bpjs-kesehatan.go.id and found zero scam reports or complaints. Our research confirmed that this subdomain is explicitly documented in official BPJS Kesehatan installation manuals, hospital software guides, and GitHub repositories as the required webservice URL for fingerprint (sidik jari) biometric registration and validation within Indonesia's JKN health insurance program. No negative mentions or fraud indicators were found.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Domain & Encryption
Server Reputation
Still, stay alert
No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.
- Double-check the exact URL in your address bar
Confirm you are actually on fp.bpjs-kesehatan.go.id and not a lookalike like f-p.bpjs-kesehatan.go.id.com or an IDN homoglyph.
- Use a password manager
Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.
- OpenDiscuss this site on the forum
If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Safety FAQ
Common questions about this site, answered from the scan data on this page. These are auto-generated — not hand-written — so they always match the underlying report.
- Our automated security review found no threat indicators on fp.bpjs-kesehatan.go.id. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
- fp.bpjs-kesehatan.go.id passed our automated security checks with a trust score of 90/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
- fp.bpjs-kesehatan.go.id is 2.4 years old, registered on 12/30/2023 through PANDI Registrar. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 91 antivirus engines in our malware network report fp.bpjs-kesehatan.go.id as clean.
- No. fp.bpjs-kesehatan.go.id is not currently listed on the major browser blocklist feeds that modern browsers use.
- fp.bpjs-kesehatan.go.id resolves to an IP operated by BPJS KESEHATAN in ID (usage type: Commercial). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- We cache results for 24 hours. Signed-in MalwareTips members can trigger a manual rescan at any time using the "Rescan" button on the report page, which re-runs every check from scratch and refreshes this page.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.