Security Scan: Thrive Beauty

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4d0a764d-fe06-4ade-86a4-3675dc62d05b Domain and IP registration (RDAP)/api/v1/rdap/4d0a764d-fe06-4ade-86a4-3675dc62d05b Certificate Transparency/api/v1/ct/thrivebeauty.co How often this domain was scanned/api/v1/domain/stats/thrivebeauty.co Scan history for this domain/api/v1/domain/history/thrivebeauty.co?limit=15

This website contacted 30 IPs in 4 countries across 25 domains to perform 118 HTTP transactions. The main domain is thrivebeauty.co and was registered 29 years ago.

Submitted URL: https://thrivebeauty.co

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Established affiliate blog now serving an EtherHiding / ErrTraffic exploit-kit chain: CRITICAL IDS malware alerts, primary-domain malware-loader flag, and ClickFix-flagged resource. Avoid.

Risk Factors (6)

ET MALWARE EtherHiding Exfil CRITICAL alerts — blockchain-based malicious payload exfiltration

ET EXPLOIT_KIT ErrTraffic Cluster Checkin CRITICAL alerts — known ClickFix/exploit delivery service

Primary domain reported as malware loader in threat intelligence

IClickFix-flagged third-party domain loaded by the page

Multiple blockchain RPC endpoints contacted (EtherHiding infrastructure pattern)

Dynamic code generation via Function() constructor

Domain age information unavailable

Details

Page Title

Thrive Beauty

Scan Type

public

Favicon Hash

MMH3: -2121530112

MD5: 335a272585a88d8f8ad4b1037695c754

Domain Name Analysis

The domain name 'thrivebeauty.co' uses the Colombian country-code top-level domain (.co). Count 12 characters in 'thrivebeauty' with 5 vowels and seven consonants. Word splitting yields two words: thrive, beauty. Expect six characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.05s

Total Load Time

10.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:12,789 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical55% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

55%

government public service

39%

blog personal website

28%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
31	160.153.0.151Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
3	2.18.244.24Akamai · CDN	Schiphol, North Holland, Netherlands	AS20940Akamai International B.V.
3	23.207.210.143Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
3	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	216.239.34.36Google · CDN	United States	AS15169Google LLC
3	51.8.44.252Azure · CLOUD	Dulles, Virginia, United States	AS8075Microsoft Corporation
3	142.250.154.148Google · CDN	United States	AS15169Google LLC
3	142.251.127.157Google · CDN	United States	AS15169Google LLC
3	23.222.34.36Akamai · CDN	Amsterdam, North Holland, Netherlands	AS16625Akamai Technologies, Inc.
118	30	-	-