Security Scan Report: trk.healthynews.biz

Site favicon
Submitted: Sep 26, 2026, 5:51:13 PMCompleted: Sep 26, 2026, 5:55:58 PMpubliccompleted

This website contacted 3 IPs in 1 country across 2 domains to perform 3 HTTP transactions. The main domain is trk.healthynews.biz and was registered 14 years ago.

Submitted URL: https://trk.healthynews.biz/tgh8PQ8-prRYKudfy9k8Z--CFLfDdgBLhQ1kKuzE9w7bccecb6eFBgq-g-TjWRc5y4EFHnskc5ugji1oLNSrp77fW8MOhwnTg4QAWPbsRO4FtqmqhG7sjxdV9qEkNMAqurCjupD7F1XIqSacaed8Xz2X_1dK-ruD4LkGtwdq8zus7xFP7Eguk4O4HO5JDCbvt6vcTDRKqxnO_yo80KTaX-St_lGdIGn43JIj25FQYP1NaPOumSw7gFw4-LcIeRk

AI Security Verdict

Moderate Risk

Confidence: 60%

5
Risk Score

2-day-old unranked .biz tracking-domain serving a random-token 'human verification' gate with no legitimate content or forms. No malware or credential-harvesting evidence yet, but the pattern is a common scam-redirect funnel — treat with caution.

Risk Factors (4)
Domain only 2 days old
Random high-entropy URL path on a 'trk' tracking subdomain
Human-verification interstitial used as an unexplained traffic hand-off gate
No identifiable owner, purpose, or legitimate content
Safety Factors (6)
No credential, password, or payment fields detected (0 password, 0 disguised password, 0 payment fields)
No Indicators of Compromise matched against the page or its resources
No JavaScript malware (YARA) patterns and no known malicious kit identified
No cross-origin credential exfiltration or suspicious cross-origin JS behaviour
Only external resource is cdn.jsdelivr.net (a common legitimate CDN)
Verdict cited a credential/login form, but DOM analysis found no password field (real or disguised) or payment field, and no other hard signal — credential-phishing framing unsupported; risk adjusted from 5 to 5
Domain age information unavailable

Details

Page Title

Verification

Scan Type

public

Domain Name Analysis

The domain name 'trk.healthynews.biz' uses the business-focused generic top-level domain (.biz) and includes subdomain 'trk'. The registrable portion 'healthynews' spans 11 characters containing three vowels alongside eight consonants. Breaking it apart gives 2 words: healthy, news. Median word length is 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://trk.healthynews.biz/tgh8PQ8-prRYKudfy9k8Z--CFLfDdgBLhQ1kKuzE9w7bccecb6eFBgq-g-TjWRc5y4EFHnskc5ugji1oLNSrp77fW8MOhwnTg4QAWPbsRO4FtqmqhG7sjxdV9qEkNMAqurCjupD7F1XIqSacaed8Xz2X_1dK-ruD4LkGtwdq8zus7xFP7Eguk4O4HO5JDCbvt6vcTDRKqxnO_yo80KTaX-St_lGdIGn43JIj25FQYP1NaPOumSw7gFw4-LcIeRk

Page Load Overview

0.88s
Total Load Time
49 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:194 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content49% confidence
Type: static
Method: ml+structural

All Detected Categories

adult content
49%
healthcare medical
33%
government public service
33%
documentation technical
32%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
115.204.240.91Reston, Virginia, United States
AS16276OVH SAS
1104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1151.101.193.229Fastly · CDNUnited States
AS54113Fastly, Inc.
33--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A861E97265681535BDAEF2B4A190B38CB0428706E65377F068EDB0E2D4C8BC629737D4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:6uedvOWjQj1m8nXe6mRpKAzIZJM5ElZWhprpFgh:63NOWjrcrJdTWhprpFgh

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3178:gwQCQAAABIIIFEAAAQAgIAEABAVAxIAAwoAAAAAgJJgRIAAAkEAQAAAEAAA5QAjAAAGQCBAoEARIBAAAAMgEUSiEAIIAAUAC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffe7e7ffff
Perceptual Hash:b38ccc63939966cc
Difference Hash:0000202a28281008
Wavelet Hash:0f0f1f0720203c3c
Color Hash:#86bf40

Other Hashes

Crop Resistant:0000202a28281008

Scan History

Scan history not available

Unable to load historical scan data