Security Scan Report: suaradigital.id

Site favicon
Submitted: Oct 8, 2026, 10:59:27 PMCompleted: Oct 8, 2026, 11:01:25 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Indonesian news site (self-branded, 3-year-old domain, no credential or payment forms) whose HTML is injected with the analyst-vetted ErrTraffic/Exvicy ClickFix WordPress loader and shows critical IDS EtherHiding/ClickFix C2 alerts — treat as compromised malware-distribution page.

Risk Factors (5)
CRITICAL YARA match for the ErrTraffic/Exvicy injected WordPress loader (ClickFix) on the page's own HTML
Multiple CRITICAL IDS malware alerts: EtherHiding exfiltration and ClickFix C2 domain (gateway.tenderly.co)
Blockchain RPC endpoints used as loader/C2 infrastructure alongside the ClickFix alerts
Compromised-WordPress injection profile on an otherwise ordinary news site
Unranked third-party script host (karmazarbaza.com) serving JavaScript to the page
Domain age information unavailable

Details

Page Title

Suara Digital - Situs Berita Terkini dan Terpercaya

Scan Type

public

Domain Name Analysis

The domain 'suaradigital.id' uses the Indonesian country-code top-level domain (.id) while skipping any subdomain. The core label 'suaradigital' covers 12 characters with 6 vowels and 6 consonants. Splitting it apart reveals 3 words: su, ara, digital. Median word length is 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://suaradigital.id

Page Load Overview

75.10s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:id
Text Length:7,502 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service67% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
67%
news media journalism
40%
corporate
35%
forum
25%
news/blog
20%

Detected Features

Articles
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12103.16.198.170Indonesia
AS131775PT. Jupiter Jala Arta
6142.251.13.95Google · CDNUnited States
AS15169Google LLC
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
6172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.20.94Google · CDNUnited States
AS15169Google LLC
6158.94.208.87Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
635.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
6142.250.154.95Google · CDNUnited States
AS15169Google LLC
6188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10216--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T118E3F7B250CE147E2B56A7D6008BB70C735B8336CED68D95F3FA8BF8D680D5259E2205

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:rDypEbtF994RhoJfhYHm6C4sOLyITueh/Jcezs/54sdtAK1AcGXYwsZe0Rm1L8zA:ruEb94voIHm6CdcyAleB/j1q

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:152201:IgBOsVgDYHf0IlSmRYhCIBwcYrBrqpgQkkIOAFGMckRUghBokAxUYKnC0AAAMBRYQARAAAEBEURBlOI5B8DuQEY4ZIdwhQA8

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c381bdbdbd8d87ff
Perceptual Hash:bacd343ccb30c792
Difference Hash:362b6969692d2c4b
Wavelet Hash:8180b8bdad85076b
Color Hash:#b279d2

Scan History

Scan history not available

Unable to load historical scan data