Security Scan: קניית קבלן רשום מכירת קבלן רשום הגעת למומחה ד

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/10fbdea8-5dfc-4760-8d19-36e45456bc02 Domain and IP registration (RDAP)/api/v1/rdap/10fbdea8-5dfc-4760-8d19-36e45456bc02How often this domain was scanned/api/v1/domain/stats/taxexpert.co.il Scan history for this domain/api/v1/domain/history/taxexpert.co.il?limit=15

This website contacted 8 IPs in 2 countries across 8 domains to perform 16 HTTP transactions. The main domain is taxexpert.co.il.

Submitted URL: https://taxexpert.co.il

Effective URL:

https://www.taxexpert.co.il/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate-looking Israeli contractor brokerage page whose WordPress was compromised with an ErrTraffic/Exvicy EtherHiding loader, confirmed by analyst-vetted kit roster and critical IDS malware alerts.

Risk Factors (5)

Compromised WordPress site serving an injected malicious loader (ErrTraffic/Exvicy)

Hidden blockchain-based payload retrieval (EtherHiding) evading static detection

Multiple critical IDS malware/exploit-kit alerts on the live session

Obfuscated inline script with XOR/Base64 decoding and dynamic code execution

Primary domain flagged as malware/loader in threat intelligence

Domain age information unavailable

Details

Page Title

קניית קבלן רשום מכירת קבלן רשום הגעת למומחה דורון יניב

Scan Type

public

Domain Name Analysis

The domain 'taxexpert.co.il' uses the Israeli country-code top-level domain (.co.il) while skipping any subdomain. Count 9 characters in 'taxexpert' containing three vowels alongside six consonants. Tokenizing the label suggests two words: tax, expert. Median word length is 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.17s

Total Load Time

289 KB

Total Size

Language Analysis

Primary Language

🇮🇱Hebrew

Code: he

Confidence:80%

Script:Hebrew

Direction:rtl

Detection Details

HTML Lang Attribute:he-IL

Text Length:25,831 chars

Detector Agreement:100%

Website Classification

Primary Category

adult content99% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

adult content

99%

government public service

98%

finance banking

98%

corporate business

98%

documentation technical

95%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
2	67.205.6.26	Ashburn, Virginia, United States	AS26347New Dream Network, LLC
2	142.251.20.97Google · CDN	United States	AS15169Google LLC
2	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	216.239.34.36Google · CDN	United States	AS15169Google LLC
2	31.77.16.64	Amsterdam, North Holland, Netherlands	AS219337Fzco
2	216.239.32.36Google · CDN	United States	AS15169Google LLC
2	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
16	8	-	-