Security Report: sumuttoday.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/10fe449c-b19a-48d3-bf2c-0e71659ea998 Domain and IP registration (RDAP)/api/v1/rdap/10fe449c-b19a-48d3-bf2c-0e71659ea998 Certificate Transparency/api/v1/ct/sumuttoday.com How often this domain was scanned/api/v1/domain/stats/sumuttoday.com Scan history for this domain/api/v1/domain/history/sumuttoday.com?limit=15

This website contacted 15 IPs in 3 countries across 13 domains to perform 71 HTTP transactions. The main domain is sumuttoday.com and was registered 21 years ago.

Submitted URL: https://sumuttoday.com

Effective URL:

https://www.sumuttoday.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised Indonesian news site serving a ClickFix/Cloudflare-lookalike overlay that lures Windows users into pasting attacker code; EtherHiding blockchain loader and CRITICAL YARA/IDS alerts confirm malware distribution.

Risk Factors (6)

Injected fake Cloudflare 'Human Verification' overlay instructing Windows users to open Terminal and paste/run attacker code (ClickFix)

EtherHiding loader resolving its payload host through a blockchain smart contract

CRITICAL YARA + kit-roster identification of an analyst-vetted phishing kit

Multiple CRITICAL IDS malware/exploit-kit alerts (EtherHiding, ClickFix, ErrTraffic)

External script posting page URLs to an unranked third-party domain (ferma.seo-solutions.eu.cc)

SEO-spam content injection: unrelated illegal-gambling article headlines on a legitimate news domain

Domain age information unavailable

Details

Page Title

Sumut Today – Informasi Harian Warga Sumatera Utara

Scan Type

public

Favicon Hash

MMH3: 1204787366

MD5: a45abce186ded33c02991dbd79764326

Domain Name Analysis

Domain 'sumuttoday.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The core label 'sumuttoday' covers 10 characters split between four vowels and six consonants. Tokenizing the label suggests three words: sum, ut, today. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

10.34s

Total Load Time

854 KB

Total Size

Language Analysis

Primary Language

🇮🇩Indonesian

Code: id

Confidence:80%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:id

Text Length:6,678 chars

Detector Agreement:75%

Website Classification

Primary Category

real estate property78% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

real estate property

78%

documentation technical

76%

government public service

65%

news media journalism

56%

technology software

48%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	103.123.62.79	Indonesia	AS136052PT Cloud Hosting Indonesia
4	142.251.110.95Google · CDN	United States	AS15169Google LLC
4	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
4	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
4	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
4	172.67.209.248Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.250.154.94Google · CDN	United States	AS15169Google LLC
4	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
71	15	-	-