Security Report: hiveandhalo.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5c6ce977-3db6-4bc7-a79b-799f989b6222 Domain and IP registration (RDAP)/api/v1/rdap/5c6ce977-3db6-4bc7-a79b-799f989b6222 Certificate Transparency/api/v1/ct/hiveandhalo.com How often this domain was scanned/api/v1/domain/stats/hiveandhalo.com Scan history for this domain/api/v1/domain/history/hiveandhalo.com?limit=15

This website contacted 18 IPs in 3 countries across 15 domains to perform 151 HTTP transactions. The main domain is hiveandhalo.com and was registered 21 years ago.

Submitted URL: https://hiveandhalo.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate-looking fashion store whose page is compromised: an analyst-vetted ErrTraffic/Exvicy WordPress loader, CRITICAL YARA hit, malware-tagged primary domain and ClickFix/EtherHiding C2 traffic make this a malware-distributing site.

Risk Factors (5)

CRITICAL YARA match for ErrTraffic/Exvicy injected WordPress loader (roster-anchored, analyst-vetted)

Multi-source content-malware Indicators of Compromise on the primary domain and on the exact scanned URL

CRITICAL IDS alerts for ClickFix domain contact and EtherHiding exfiltration

Obfuscated JavaScript (new Function constructor) plus obfuscated-JS IDS signature

Unranked third-party script host and flagged external malware domains referenced by the page

Domain age information unavailable

Details

Page Title

Home - HIVE & HALO

Scan Type

public

Favicon Hash

MMH3: -1913687475

MD5: 1ac4b9512fc36e781d1746f1367ac0a1

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'hiveandhalo.com' is registered. The registrable portion 'hiveandhalo' spans 11 characters containing 5 vowels alongside six consonants. It segments into three words: hive, and, halo. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.78s

Total Load Time

8.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,653 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software51% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

technology software

51%

corporate

35%

documentation technical

33%

blog personal website

30%

social media network

27%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	67.208.45.200	United States	AS32613Leaseweb Canada Inc.
8	142.251.13.95Google · CDN	United States	AS15169Google LLC
8	65.8.131.85Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
8	23.197.141.76Akamai · CDN	Frankfurt am Main, Hesse, Germany	AS16625Akamai Technologies, Inc.
8	54.231.195.80Aws · CLOUD	Ashburn, Virginia, United States	AS16509Amazon.com, Inc.
8	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
8	162.159.128.61Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	192.178.183.94Google · CDN	United States	AS15169Google LLC
8	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
151	18	-	-