Security Scan Report: indodrama.my.id

Site favicon
Submitted: Oct 1, 2026, 1:05:10 PMCompleted: Oct 1, 2026, 1:06:41 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Indonesian short-film site hijacked into a ClickFix/EtherHiding malware page: corroborated malware IoC on the domain, CRITICAL IDS alerts, fake Cloudflare verification and obfuscated blockchain-payload JS. Avoid.

Risk Factors (6)
Corroborated malware IoC on the scanned domain and URL (iclickfix / unknown malware)
CRITICAL IDS malware alerts characteristic of EtherHiding exfiltration
Fake Cloudflare 'human verification' overlay using the ClickFix paste-and-run trick
Obfuscated JavaScript with eval()/Function() dynamic code generation
Loads code from an unranked third-party script host (browseid.codes)
Domain only 73 days old and unranked in Cisco Umbrella
Domain age information unavailable

Details

Page Title

INDO DRAMA - Kumpulan film pendek indonesia

Scan Type

public

Domain Name Analysis

The domain name 'indodrama.my.id' uses the Indonesian country-code top-level domain (.my.id). Count 9 characters in 'indodrama' containing 4 vowels alongside 5 consonants. It segments into two words: indo, drama. Average segment length settles at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://indodrama.my.id/

Page Load Overview

20.53s
Total Load Time
3.6 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:id
Text Length:1,590 chars
Detector Agreement:75%

Website Classification

Primary Category

documentation technical56% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
56%
technology software
34%
entertainment media
32%
corporate
25%
news/blog
20%

Detected Features

Search
Articles
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25103.74.5.137Indonesia
AS135444PT Ikubaru Indonesia
2104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.18.10.59Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.152.4Google · CDNUnited States
AS15169Google LLC
2178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
2172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
235.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
2104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.155.4Google · CDNUnited States
AS15169Google LLC
8531--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T132E3FCA363F416ED56888DEEC404791744F2C1767C0E63DCB4E2AA17F93FD648A66B20

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:fi8qEu6uei8qEu6uei8qEu6u/JsypPmA8Ii8qEu6uzxuumei8qEu6uV7tzmei8qz:oJ95mA8l7GG9Ava

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:146800:BwqADLIxBBAQm5kA1RhJkfAZLQIgFiIpWJpBFDomgBpAgXQBCeIAAyCIR9QEcUkEBDhJDgGkoQ0VABFkYIkgMD4TYG4Ukgbg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c3c3c040c0c3c3c
Perceptual Hash:924dcf30306d39cf
Difference Hash:f8e0f89c9d9de9e9
Wavelet Hash:3c7c7c4c4c0c7c7c
Color Hash:#71bf40

Scan History

Scan history not available

Unable to load historical scan data