Security Report: energyecohub.com.au - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/a6e8423a-fa0e-427f-8797-db2fe5da8fb2 Domain and IP registration (RDAP)/api/v1/rdap/a6e8423a-fa0e-427f-8797-db2fe5da8fb2How often this domain was scanned/api/v1/domain/stats/energyecohub.com.au Scan history for this domain/api/v1/domain/history/energyecohub.com.au?limit=15

This website contacted 7 IPs in 2 countries across 6 domains to perform 118 HTTP transactions. The main domain is energyecohub.com.au.

Submitted URL: https://energyecohub.com.au

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Legitimate-looking Victorian energy site evidently COMPROMISED: it loads an injected ClickFix fake 'Human Verification' kit with an EtherHiding blockchain loader. Do not visit or follow its prompts.

Risk Factors (6)

Known ClickFix/Windows fake-verification overlay malware kit injected into a legitimate-looking site

EtherHiding — blockchain-contract-hosted payload retrieval with CRITICAL IDS malware alerts

Obfuscated script hiding known-attacker RPC hosts (1rpc.io, drpc.org, tenderly.co)

Third-party script loaded from cloud-browse.codes, flagged by three independent threat feeds

Injected spam/promotional text unrelated to the site's own content indicates the site is compromised

Primary domain energyecohub.com.au reported as 'iclickfix' malware in threat intel (single-source)

Domain age information unavailable

Details

Page Title

EnergyEcoHub | EV Chargers, Heating & Cooling Victoria

Scan Type

public

Favicon Hash

MMH3: -250950058

MD5: a556ba2a8b95e9281ee6c14950d7fa3a

Domain Name Analysis

The domain 'energyecohub.com.au' uses the Australian country-code top-level domain (.com.au) with no subdomain. The core label 'energyecohub' covers 12 characters with 5 vowels and seven consonants. Breaking it apart gives 3 words: energy, eco, hub. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.32s

Total Load Time

12.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:9,723 chars

Detector Agreement:80%

Website Classification

Primary Category

social media network74% confidence

Type: spa

Method: ml+structural

All Detected Categories

social media network

74%

documentation technical

65%

corporate business

60%

adult content

57%

download file sharing

56%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
22	50.6.3.186	Ashburn, Virginia, United States	AS31898Oracle Corporation
16	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
16	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
16	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
16	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
16	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
16	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
118	7	-	-