Security Scan Report: latishahenry.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 8 domains to perform 90 HTTP transactions. The main domain is latishahenry.com and was registered 1 year 12 months ago.

Submitted URL: https://latishahenry.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate consulting site's WordPress appears compromised: YARA and vetted kit roster identify an ErrTraffic/Exvicy EtherHiding loader that pulls a next stage from blockchain RPC hosts. Avoid visiting; do not interact.

Risk Factors (6)
Critical YARA match for ErrTraffic/Exvicy ClickFix loader injected into the page
Vetted malicious-kit roster identification (family exvicy-errtraffic-2026-09, phishing)
EtherHiding: blockchain-contract-driven retrieval of the next malware stage
CRITICAL IDS alert ET MALWARE EtherHiding Exfil M2
Multi-feed malicious IoC on loaded resource framesavecloudjs.beer and RPC host rpc-mainnet.matic.quiknode.pro
Obfuscated JavaScript hiding abuse-flagged hosts from casual inspection
Domain age information unavailable

Details

Page Title

LaTisha Henry Consulting – Your Partner in Progress

Scan Type

public

Domain Name Analysis

The domain 'latishahenry.com' uses the commercial generic top-level domain (.com) with no subdomain. The second-level label 'latishahenry' is 12 characters long with four vowels and 8 consonants. Segmentation suggests 4 words: la, tish, a, henry. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://latishahenry.com

Page Load Overview

4.28s
Total Load Time
3.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,444 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10160.153.0.202Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
10192.178.183.95Google · CDNUnited States
AS15169Google LLC
1099.84.152.70Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1023.207.210.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
1064.130.32.46Frankfurt am Main, Hesse, Germany
AS20326TeraSwitch Networks Inc.
10142.250.154.94Google · CDNUnited States
AS15169Google LLC
1023.67.142.207Akamai · CDNFrankfurt am Main, Hesse, Germany
AS16625Akamai Technologies, Inc.
1099.84.152.129Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1023.207.210.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
909--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T102442B61BBA1283932BF13AE9417B34C245999B3D78D53E5F8FD815851D8FD232A230E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:CVrXkNMiu54m84nCJA8yAZAqfA2SpOGy/8wVKba/0ELN4zsY8IpidxkN3CsowHFw:DdYAyZwGy/8wVK2TusYFod

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:261442:MgodIqBLGYQQwYDIZwnAhQKWCIp5AAZFNEIQzQgBoVlZQioScDLFmKBwAkSMgKcGCAkAJCJCjkUeOkRAlR6IIYIBgckThhkF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff7f000000ff
Perceptual Hash:92e5e91e8c21b557
Difference Hash:6580d2f2686d4971
Wavelet Hash:ffffff18000000bd
Color Hash:#741f93

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data