Security Scan Report: chitayle.jp

Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 2 countries across 14 domains to perform 59 HTTP transactions. The main domain is chitayle.jp and was registered 2 years 9 months ago.

Submitted URL: https://chitayle.jp

AI Security Verdict

Confirmed Scam

Confidence: 92%

10
Risk Score

Lifestyle blog is compromised: it embeds EtherHiding blockchain malware infrastructure (11 critical IDS malware alerts) and a fake-CAPTCHA ClickFix that tricks users into running PowerShell. Strong malware-distribution evidence outweighs its age and self-branding.

Risk Factors (5)
Critical IDS malware alerts (EtherHiding exfiltration)
Blockchain C2/payload-retrieval infrastructure embedded in content
ClickFix-style fake CAPTCHA tricking users into executing PowerShell
Threat-intel malware report on the primary domain
eval() dynamic code execution
Domain age information unavailable

Details

Page Title

Chitayle – ライフスタイル

Scan Type

public

Domain Name Analysis

The domain name 'chitayle.jp' uses the Japanese country-code top-level domain (.jp) while skipping any subdomain. The core label 'chitayle' covers 8 characters with three vowels and 5 consonants. It segments into 2 words: chita, yle. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://chitayle.jp

Page Load Overview

5.97s
Total Load Time
946 KB
Total Size

Language Analysis

Primary Language

🇯🇵Japanese
Code: ja
Confidence:80%
Script:Mixed
Direction:ltr

Detection Details

HTML Lang Attribute:ja
Text Length:3,479 chars
Detector Agreement:67%

Website Classification

Primary Category

entertainment media98% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
98%
social media network
91%
blog personal website
74%
adult content
69%
healthcare medical
68%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1720.18.122.49Azure · CLOUDTokyo, Tokyo, Japan
AS8075Microsoft Corporation
3192.178.183.95Google · CDNUnited States
AS15169Google LLC
315.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
352.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
334.111.175.102Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3104.18.11.59Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
33.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5915--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15C727731E1A940657F0FD7BD9196B328B968E7059D03B7BA70F830588A689F700F762D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:I7b2QqNrqwRXdSZsTaAh51TNslQCfEGHRmy4kWD1z1Odwx1dmH0KBsaGC:Mb2Qwr/ZdSZUaAhHkWyUKT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:17141:HGQKH/YQBObgDAmwTqSyEEQahAjkIAQyQZ1y+YAJGAxgG6BIsBIRighRSkDRSIoVtJMxCgACiBjOHL7kMSHoBRkS5I1AJACI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00df87e7e787fdff
Perceptual Hash:be1c4947456b3e58
Difference Hash:f13b2f0d0f2b2b11
Wavelet Hash:009f85858585ddff
Color Hash:#784e3a

Scan History

Scan history not available

Unable to load historical scan data