Security Report: bhumivista.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/80356166-dacc-4cda-9c32-31665ba3dd7e Domain and IP registration (RDAP)/api/v1/rdap/80356166-dacc-4cda-9c32-31665ba3dd7eHow often this domain was scanned/api/v1/domain/stats/bhumivista.com Scan history for this domain/api/v1/domain/history/bhumivista.com?limit=15

This website contacted 8 IPs in 3 countries across 8 domains to perform 222 HTTP transactions. The main domain is bhumivista.com and was registered 2 years 2 months ago.

Submitted URL: https://bhumivista.com/

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate Dholera real-estate site whose WordPress install is compromised: vetted ErrTraffic/Exvicy loader, EtherHiding blockchain exfiltration and CRITICAL malware IDS alerts make the page unsafe to visit.

Risk Factors (5)

Compromised WordPress site serving the ErrTraffic/Exvicy ClickFix-style injected loader (kernel of a phishing/malware campaign)

EtherHiding: blockchain-contract-derived payload retrieval — a deliberate attacker anti-takedown technique

CRITICAL IDS malware/exfiltration alert tied to page scripts

Primary domain URL flagged as malware by two independent threat feeds

Obfuscated JavaScript hides known-attacker RPC hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co)

Domain age information unavailable

Details

Page Title

Home - Bhumi Vista

Scan Type

public

Favicon Hash

MMH3: -477622235

MD5: 6acf885514c175586fab719d366cf0cf

Domain Name Analysis

The domain name 'bhumivista.com' uses the commercial generic top-level domain (.com). The registrable portion 'bhumivista' spans 10 characters split between four vowels and six consonants. Breaking it apart gives three words: b, humi, vista. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.89s

Total Load Time

4.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:5,917 chars

Detector Agreement:100%

Website Classification

Primary Category

real estate property94% confidence

Type: spa

Method: ml+structural

All Detected Categories

real estate property

94%

corporate

35%

corporate business

32%

government public service

29%

news/blog

20%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
33	92.113.16.70	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
27	142.251.110.95Google · CDN	United States	AS15169Google LLC
27	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
27	142.250.154.94Google · CDN	United States	AS15169Google LLC
27	92.113.23.175	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
27	92.113.23.27	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
27	158.94.211.226	Rotterdam, South Holland, Netherlands	AS202412Omegatech LTD
27	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
222	8	-	-