ScanMalware.com

Security Scan Report: suchanasansar.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7a0966ff-14b5-4a12-acfe-e01bd0d01424Domain and IP registration (RDAP)/api/v1/rdap/7a0966ff-14b5-4a12-acfe-e01bd0d01424How often this domain was scanned/api/v1/domain/stats/suchanasansar.comScan history for this domain/api/v1/domain/history/suchanasansar.com?limit=15
This website contacted 21 IPs in 3 countries across 13 domains to perform 113 HTTP transactions. The main domain is suchanasansar.com and was registered 7 years ago.

Submitted URL: https://suchanasansar.com

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Established Nepali tech-news site that appears compromised: CRITICAL IDS EtherHiding malware alerts, blockchain RPC payload retrieval and a malicious third-party script host indicate it is serving or relaying malware.

Risk Factors (6)
CRITICAL IDS malware alert (EtherHiding Exfil) indicating a network trojan
Blockchain RPC / smart-contract interaction consistent with EtherHiding payload retrieval
Malicious third-party script host checkyoubrowse.codes (2 independent feeds)
Primary domain flagged as a malware loader in threat intelligence
Malicious third-party IP 178.16.52.101:443 ('ek clearfake', 2 feeds) reached by page sub-resources
Dynamic code generation via Function() constructor calls
Domain age information unavailable

Details

Page Title

Suchana Sansar

Scan Type

public

Domain Name Analysis

The domain 'suchanasansar.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'suchanasansar' spans 13 characters containing 5 vowels alongside 8 consonants. It segments into four words: such, an, as, ansar. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

fag, seitat 22, 2003 SuchanaSansar Tawar aan ‘SERA aa enh rr Ae Rey Ween Gierer dorey tetstcot ofsrent Voie Creal aeiiss Ulead TaITA BRA TA Tat atatewal cM gos-¢-g05 [._] SA ERS Bl Cis] SUS-¢-SUS...

Page Load Overview

10.55s
Total Load Time
6.5 MB
Total Size

Language Analysis

Primary Language

🇳🇵NE
Code: ne
Confidence:36%
Script:Unknown
Direction:ltr

Detection Details

Text Length:6,188 chars
Detector Agreement:50%

Website Classification

Primary Category

technology software84% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
84%
social media network
77%
cryptocurrency blockchain
58%
government public service
45%
phishing scam
42%

Detected Features

OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1345.113.226.226Panvel, Maharashtra, India
AS146943Tier 4 Cloud Services
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
5151.101.129.229Fastly · CDNUnited States
AS54113Fastly, Inc.
5172.64.147.188Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
5104.21.26.223Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11321--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18D3451128B89516B71491DFF70047E3952F6D736AAE44085B37A1CC8BEE18AE20DF736

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:bVA2Uw7iYIlgrLXzZJo191jw6xmGRdMFq4RdHHb:Ag/XTqRY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:240450:gRAAAAEVwgBRXPLkSUwAfNLYA0FgSRAIGIrxBIlQAAggQi8MRAZiWI6uxIgwI2ItMArBIADDShEhAFxAKwQJ6JlgyhMIAJgg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff1f1f1f1f2303ff
Perceptual Hash:bd98e3e790e0e08e
Difference Hash:ce33b3b173c746d6
Wavelet Hash:ff1f1d1f13010347
Color Hash:N/A

Other Hashes

Crop Resistant:ce33b3b173c746d6,59dc80b4c48a80cc,a3333170617970c0,99f8f8d8f2b3d0cd,0604272713312401

Scan History

Scan history not available

Unable to load historical scan data