Security Report: paystubsetc.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cc2e92b7-cd82-4e5f-990b-1c1ca71d61e2 Domain and IP registration (RDAP)/api/v1/rdap/cc2e92b7-cd82-4e5f-990b-1c1ca71d61e2 Certificate Transparency/api/v1/ct/paystubsetc.com How often this domain was scanned/api/v1/domain/stats/paystubsetc.com Scan history for this domain/api/v1/domain/history/paystubsetc.com?limit=15

This website contacted 7 IPs in 2 countries across 7 domains to perform 62 HTTP transactions. The main domain is paystubsetc.com and was registered 6 years ago.

Submitted URL: https://paystubsetc.com

AI Security Verdict

High Risk

Confidence: 87%

Risk Score

Established but compromised WordPress site: CRITICAL IDS EtherHiding malware alert, blockchain-RPC exfil and multi-source malware domain xaz2.com, plus the page's own fake pay-stub/landlord-verification services.

Risk Factors

CRITICAL Suricata malware alert (EtherHiding Exfil) on the scanned page

Blockchain RPC exfiltration infrastructure (tenderly.co gateway) queried via DNS and TLS SNI

Multi-source malware-tagged external resource xaz2.com (iclickfix)

Primary domain itself carries a stealer-malware threat-intel report

Content promotes fabricated financial/rental documentation

Domain age information unavailable

Details

Page Title

Pay Stubs Etc - Employment / Rental Verification Service

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'paystubsetc.com' is registered and has no subdomain. Count 11 characters in 'paystubsetc' split between three vowels and 8 consonants. Tokenizing the label suggests 3 words: pay, stubs, etc. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

9.47s

Total Load Time

575 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,911 chars

Detector Agreement:80%

Website Classification

Primary Category

real estate property46% confidence

Type: spa

Method: ml+structural

All Detected Categories

real estate property

46%

government public service

38%

corporate

35%

documentation technical

32%

adult content

32%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	162.210.97.242	United States	AS14555LiquidNet US LLC
8	142.251.110.101Google · CDN	United States	AS15169Google LLC
8	192.178.183.138Google · CDN	United States	AS15169Google LLC
8	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
8	172.217.114.4Google · CDN	United States	AS15169Google LLC
8	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
62	7	-	-