Security Report: nobinsikder.epizy.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5413315e-8362-4f34-a712-4397206444e1 Domain and IP registration (RDAP)/api/v1/rdap/5413315e-8362-4f34-a712-4397206444e1How often this domain was scanned/api/v1/domain/stats/nobinsikder.epizy.com Scan history for this domain/api/v1/domain/history/nobinsikder.epizy.com?limit=15

This website contacted 15 IPs in 3 countries across 12 domains to perform 59 HTTP transactions. The main domain is epizy.com and was registered 13 years ago.

Submitted URL: https://nobinsikder.epizy.com

Effective URL:

https://nobinsikder.epizy.com/?i=1

Redirected

The Cisco Umbrella rank of the primary domain is #525,707 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 98%

Risk Score

Compromised WordPress blog serving a ClickFix fake Cloudflare CAPTCHA that copies a hidden PowerShell command to the clipboard and pulls its payload via an EtherHiding blockchain loader. Confirmed malware delivery.

Risk Factors (6)

Clipboard shell-command injection (ClickFix) — three clipboard-copy events observed

Fake Cloudflare 'Human Verification' / 'I'm not a robot' overlay with spoofed Ray ID impersonating Cloudflare

PowerShell/mshta/msiexec LOLBin command staged with hidden window and 30s sleep evasion

Blockchain-based (EtherHiding) payload delivery via Polygon RPC domains hidden in obfuscated JavaScript

Anti-analysis: DevTools and right-click blocked; encoding/decoding routines in inline scripts

Compromised WordPress tenant on free shared hosting (epizy.com) serving injected overlay over a 'Page not found' blog

Domain age information unavailable

Details

Page Title

Page not found – My Blogother network

Scan Type

public

Favicon Hash

MMH3: -474027496

MD5: ed1f65f00b855007cf2a8cf201d20bf7

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'nobinsikder.epizy.com' is registered, featuring subdomain 'nobinsikder'. The registrable portion 'epizy' spans 5 characters with 2 vowels and 3 consonants. Splitting it apart reveals 2 words: epi, zy. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.25s

Total Load Time

977 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,802 chars

Detector Agreement:100%

Website Classification

Primary Category

social media network74% confidence

Type: spa

Method: ml+structural

All Detected Categories

social media network

74%

entertainment media

70%

technology software

67%

e-commerce shopping

55%

documentation technical

55%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	185.27.134.170	United Kingdom	AS34119Wildcard UK Limited
3	142.251.20.95Google · CDN	United States	AS15169Google LLC
3	142.251.110.97Google · CDN	United States	AS15169Google LLC
3	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.20.94Google · CDN	United States	AS15169Google LLC
3	31.77.16.64	Amsterdam, North Holland, Netherlands	AS219337Fzco
3	142.251.150.119Google · CDN	United States	AS15169Google LLC
3	142.251.20.149Google · CDN	United States	AS15169Google LLC
3	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.153.119Google · CDN	United States	AS15169Google LLC
59	15	-	-