Security Scan Report: lydigital.com.br

Site favicon
Submitted: Oct 11, 2026, 11:49:48 AMCompleted: Oct 11, 2026, 11:50:57 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Legitimate-looking, ~10-year-old WordPress agency site whose page carries an analyst-vetted ErrTraffic/Exvicy injected loader (CRITICAL YARA/kit hit), critical AMOS ClickFix and EtherHiding IDS alerts, and a malware-tagged URL. Treat as a compromised site distributing malware.

Risk Factors (5)
Analyst-vetted malicious kit identified on the page: ErrTraffic/Exvicy injected WordPress loader (CRITICAL phishing).
Critical YARA rule hit on the page body (injected loader with base64 blob + new Function execution).
Indicators of Compromise: scanned URL reported as malware by two independent feeds.
Two CRITICAL IDS malware alerts (AMOS ClickFix loader, EtherHiding exfiltration) plus a HIGH Spamhaus DROP inbound alert.
Third-party unranked script hosts contacted via sendBeacon/fetch and a blockchain RPC endpoint from page scripts — consistent with compromised-site injection/exfiltration.
Domain age information unavailable

Details

Page Title

Criação de sites - LYdigital

Scan Type

public

Domain Name Analysis

Within the Brazilian country-code top-level domain (.com.br), 'lydigital.com.br' is registered without a subdomain. Its registrable label 'lydigital' stretches across 9 characters split between 3 vowels and six consonants. Splitting it apart reveals 2 words: ly, digital. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lydigital.com.br/

Page Load Overview

8.42s
Total Load Time
7.3 MB
Total Size

Language Analysis

Primary Language

🇵🇹Portuguese
Code: pt
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pt-PT
Text Length:2,556 chars
Detector Agreement:80%

Website Classification

Primary Category

cryptocurrency blockchain99% confidence
Type: spa
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
99%
finance banking
99%
technology software
98%
documentation technical
94%
e-commerce shopping
94%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1750.116.86.58Vinhedo, São Paulo, Brazil
AS31898Oracle Corporation
9172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.110.95Google · CDNUnited States
AS15169Google LLC
9193.233.138.178Helsinki, Uusimaa, Finland
AS210644Aeza Group LLC
9192.178.183.97Google · CDNUnited States
AS15169Google LLC
9142.251.20.94Google · CDNUnited States
AS15169Google LLC
9142.251.127.138Google · CDNUnited States
AS15169Google LLC
9216.239.34.36Google · CDNUnited States
AS15169Google LLC
9158.94.211.226Rotterdam, South Holland, Netherlands
AS202412Omegatech LTD
966.198.240.11United States
AS55293A2 Hosting, Inc.
11612--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1CB14F960B6842837212B43BEE187F70C50A99A73DA2E96E5F0FEC1584FD5F9521B231D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:BpObvseqjAo9CFafqHFRLpGpGcRHnYSmMYNek7R/dEV3f/8eS:BMbZYCFafqr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:197604:FAEYAAUFDGhCeUjQwSmEsMMoi6iADYhmBEhRI8qIJBAoEChAAC0CJmh1IGIECMTDCEUjURy0ITCBMBBrMzhwhOgQooNbjHGD

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c3c3c3c3db9b9191
Perceptual Hash:acd36e9861639867
Difference Hash:0b2b233b33332327
Wavelet Hash:c3c3c3c3d39b9191
Color Hash:#7995d2

Scan History

Scan history not available

Unable to load historical scan data