Security Scan Report: housobread.com

Submitted: Completed: publiccompleted
This website contacted 14 IPs in 3 countries across 9 domains to perform 51 HTTP transactions. The main domain is housobread.com and was registered 1 year 2 months ago.

Submitted URL: https://housobread.com

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

Compromised WordPress site (housobread.com) with an injected ClearFake EtherHiding loader and obfuscated scripts pulling malware from flagged hosts (campaigntracker.*, trackerredirect.online). No credential forms; risk is malware served to visitors.

Risk Factors (5)
ClearFake blockchain contract loader (EtherHiding) injected into page HTML — critical phishing/malware kit
Obfuscated script hiding multiple threat-feed malware hosts (campaigntracker.icu/.run/.top)
Page loads scripts from trackerredirect.online, flagged as malware by two independent threat feeds
Primary domain reported as a malware loader in threat intelligence
Compromised WordPress site serving injected third-party code (content does not match the injected scripts)
Domain age information unavailable

Details

Page Title

A WordPress Site

Scan Type

public

Domain Name Analysis

The domain 'housobread.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label 'housobread' is 10 characters long holding five vowels versus five consonants. It segments into three words: hou, so, bread. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://housobread.com

Page Load Overview

6.40s
Total Load Time
5.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:727 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12160.153.0.169Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
395.100.135.66Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
3185.92.183.208Riga, Riga, Latvia
AS56971Cgi Global Limited
33.161.82.21Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
33.5.78.252Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
3157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3142.251.127.84Google · CDNUnited States
AS15169Google LLC
313.33.52.208Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
323.67.142.207Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
323.53.42.211Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
5114--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C7A3F778F9A9287732FF033828AB624498752400DBD607E9F1FDE064779C95936A374E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:nhvf6ypvI/y/WOt6VAnK4W6RMNB9i3mgyzYaoK9duZ2RkIMPZHd0oGPRTi:nhvfz1d/NIXkIMPZHd0oGP9i

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:99152:oTA5C0EGADKQ1JATIIobEREQAYDDTEEFFKK24y3TQQEfI4BrWAlQIaCJYCBCAyJKQOFZDU1kKkJlcjKADJDEIOEhJ0oYMiIC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data