Security Report: thefootix.net - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ef8011cc-98ab-4dfa-babc-5ddc8be7c4c7 Domain and IP registration (RDAP)/api/v1/rdap/ef8011cc-98ab-4dfa-babc-5ddc8be7c4c7How often this domain was scanned/api/v1/domain/stats/thefootix.net Scan history for this domain/api/v1/domain/history/thefootix.net?limit=15

This website contacted 11 IPs in 3 countries across 11 domains to perform 70 HTTP transactions. The main domain is thefootix.net and was registered 4 years 8 months ago.

Submitted URL: https://thefootix.net

Effective URL:

https://www.thefootix.net/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Established sports-magazine WordPress site that has been compromised: analyst-vetted ErrTraffic/Exvicy injected loader, EtherHiding blockchain C2 and CRITICAL exploit-kit IDS alerts. Do not browse.

Risk Factors (6)

Injected WordPress loader matching two known ErrTraffic/Exvicy malicious kit templates

EtherHiding: next-stage payload address fetched from a blockchain smart contract

Obfuscated inline script concealing connections to threat-feed-listed hosts

CRITICAL IDS exploit-kit and malware-exfiltration alerts

Threat-intel matches on page-loaded domains, including a confirmed malicious exploit-kit cluster

Hidden redirect infrastructure (browse-nnccodes.beer, lskannsserv.beer) unrelated to a sports magazine

Domain age information unavailable

Details

Page Title

The Footix – Sports Magazine

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

Domain 'thefootix.net' uses the network infrastructure generic top-level domain (.net) with no subdomain. Count 9 characters in 'thefootix' holding four vowels versus five consonants. Splitting it apart reveals three words: the, foot, ix. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.11s

Total Load Time

1.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:27%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:15,995 chars

Detector Agreement:75%

Language mismatch: Declared as fr-FR but detected as en

Website Classification

Primary Category

technology software95% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

95%

social media network

79%

news media journalism

68%

adult content

65%

entertainment media

51%

Detected Features

Comments

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	109.234.165.59	France	AS50474O2switch SAS
6	54.172.142.238Aws · CLOUD	Ashburn, Virginia, United States	AS14618Amazon.com, Inc.
6	192.0.73.2	San Francisco, California, United States	AS2635Automattic, Inc
6	64.130.32.46	Frankfurt am Main, Hesse, Germany	AS20326TeraSwitch Networks Inc.
6	142.251.20.95Google · CDN	United States	AS15169Google LLC
6	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.110.95Google · CDN	United States	AS15169Google LLC
6	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.14.94Google · CDN	United States	AS15169Google LLC
6	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
70	11	-	-