Security Report: itispersonal.net - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/cf984fe8-c4da-4ebe-a89f-3b8a563f0984 Domain and IP registration (RDAP)/api/v1/rdap/cf984fe8-c4da-4ebe-a89f-3b8a563f0984 Certificate Transparency/api/v1/ct/itispersonal.net How often this domain was scanned/api/v1/domain/stats/itispersonal.net Scan history for this domain/api/v1/domain/history/itispersonal.net?limit=15

This website contacted 11 IPs in 2 countries across 9 domains to perform 58 HTTP transactions. The main domain is itispersonal.net and was registered 14 years ago.

Submitted URL: https://itispersonal.net/

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Legitimate 7-year-old photography site whose loaded scripts trigger 7 CRITICAL EtherHiding malware IDS alerts and fetch code from blockchain RPC endpoints via Function() — a strong sign the site is compromised and serving a malicious loader.

Risk Factors (6)

CRITICAL IDS alerts matching an EtherHiding malware exfiltration signature (ET MALWARE)

Page loads code from blockchain RPC endpoints (Base/Polygon/Tenderly/Ankr) via XHR — atypical for a photography site and consistent with a compromised site serving a blockchain-hosted payload

Function() constructor code-generation calls indicating dynamically evaluated script

Threat-intel match on primary domain (iclickfix malware, single-source)

Multi-feed malicious classification of a third-party resource address loaded by the page

Unranked external script host (browseid.codes) injecting JavaScript

Domain age information unavailable

Details

Page Title

HOME - Headshot Photography by Annette Schreiber

Scan Type

public

Favicon Hash

MMH3: -661426084

MD5: 42e9442204a2d2a115e2c1279bb98a28

Domain Name Analysis

You're looking at domain 'itispersonal.net' on the network infrastructure generic top-level domain (.net) without a subdomain. The second-level label 'itispersonal' is 12 characters long split between 5 vowels and seven consonants. Tokenizing the label suggests 3 words: it, is, personal. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.94s

Total Load Time

3.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:6,253 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business93% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

93%

blog personal website

90%

government public service

86%

documentation technical

83%

education learning

80%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	108.167.181.158	Ashburn, Virginia, United States	AS31898Oracle Corporation
5	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	104.18.10.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	157.240.0.174Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
5	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
5	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
58	11	-	-