Security Report: eazyhob.store - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e207cae6-4d5b-4a89-9d0f-65bfb040ebd3 Domain and IP registration (RDAP)/api/v1/rdap/e207cae6-4d5b-4a89-9d0f-65bfb040ebd3How often this domain was scanned/api/v1/domain/stats/eazyhob.store Scan history for this domain/api/v1/domain/history/eazyhob.store?limit=15

This website contacted 9 IPs in 2 countries across 7 domains to perform 18 HTTP transactions. The main domain is eazyhob.store and was registered 8 months ago.

Submitted URL: https://eazyhob.store

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised WordPress site serving an injected ClickFix 'Human Verification' overlay that lures Windows users into pasting Terminal commands, loading a blockchain-hosted (EtherHiding) malware payload.

Risk Factors (5)

Injected ClickFix/Windows Terminal clipboard-execution overlay served from a compromised WordPress blog

Blockchain-hosted (EtherHiding) loader resolving payload location from a smart contract

Malicious third-party script host cloud-browse.codes (ek clearfake-1, 3 feeds) loaded by the page

Disguised as a Cloudflare connection-security check to lend false legitimacy

Google Safe Browsing Unwanted Software threat and malware IoC on the primary domain

Domain age information unavailable

Details

Page Title

My Blog – My WordPress Blog

Scan Type

public

Domain Name Analysis

You're looking at domain 'eazyhob.store' on the .store top-level domain while skipping any subdomain. Count 7 characters in 'eazyhob' containing three vowels alongside four consonants. Tokenizing the label suggests two words: eazy, hob. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.02s

Total Load Time

434 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,064 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software51% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

51%

cryptocurrency blockchain

41%

documentation technical

32%

healthcare medical

30%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	45.13.226.9	Frankfurt am Main, Hesse, Germany	AS213535YottaSrc
2	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
2	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
2	34.143.75.2Google · CDN	United States	AS396982Google LLC
2	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
2	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	34.143.78.2Google · CDN	United States	AS396982Google LLC
2	44.252.160.228Aws · CLOUD	Boardman, Oregon, United States	AS16509Amazon.com, Inc.
18	9	-	-