Security Report: ezhealthyhabits.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/137b3820-ea80-42b8-8b27-a6403333dffa Domain and IP registration (RDAP)/api/v1/rdap/137b3820-ea80-42b8-8b27-a6403333dffaHow often this domain was scanned/api/v1/domain/stats/ezhealthyhabits.com Scan history for this domain/api/v1/domain/history/ezhealthyhabits.com?limit=15

This website contacted 7 IPs in 2 countries across 8 domains to perform 57 HTTP transactions. The main domain is ezhealthyhabits.com and was registered 9 years ago.

Submitted URL: https://ezhealthyhabits.com

Effective URL:

https://www.ezhealthyhabits.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate-looking health-coaching WordPress site that has been compromised and injected with an analyst-confirmed ClickFix/EtherHiding malware loader; visitors risk being pushed into executing a malicious terminal command. Avoid.

Risk Factors (5)

Analyst-vetted ClickFix/Windows Terminal lure kit injected into the page

EtherHiding: obfuscated JavaScript resolving payload addresses through blockchain smart contracts over multiple RPC endpoints

Four CRITICAL IDS malware/exfiltration alerts

External exploit-kit host (cloud-browse.codes / clearfake) loaded by the page

Likely compromised legitimate WordPress installation serving malware to visitors

Domain age information unavailable

Details

Page Title

ez healthy habits – ez healthy habits

Scan Type

public

Domain Name Analysis

The domain name 'ezhealthyhabits.com' uses the commercial generic top-level domain (.com) with no subdomain. Count 15 characters in 'ezhealthyhabits' split between 5 vowels and 10 consonants. Tokenizing the label suggests three words: ez, healthy, habits. Median word length is six characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.91s

Total Load Time

2.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,517 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical31% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

31%

Detected Features

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	206.225.80.198	United States	AS18501CyberCloud Professionals LLC
8	142.251.20.95Google · CDN	United States	AS15169Google LLC
8	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
8	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
57	7	-	-