Security Report: roydavid1.co.il - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/efb1ab13-f6f9-4953-9f15-b7f66c8c9b57 Domain and IP registration (RDAP)/api/v1/rdap/efb1ab13-f6f9-4953-9f15-b7f66c8c9b57 Certificate Transparency/api/v1/ct/roydavid1.co.il How often this domain was scanned/api/v1/domain/stats/roydavid1.co.il Scan history for this domain/api/v1/domain/history/roydavid1.co.il?limit=15

This website contacted 22 IPs in 3 countries across 17 domains to perform 123 HTTP transactions. The main domain is roydavid1.co.il and was registered 22 years ago.

Submitted URL: https://roydavid1.co.il

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Established WordPress marketing site compromised to serve ClearFake/EtherHiding malware: loads a multi-feed flagged malicious script (mikelle.beer) and exfiltrates via blockchain RPC, triggering a CRITICAL malware IDS alert.

Risk Factors

Page loads a malicious third-party script (mikelle.beer, ClearFake malware, multi-source corroborated)

Critical IDS alert for EtherHiding malware exfiltration over blockchain RPC

Obfuscated JS with eval() and Function() code generation

Compromised-looking WordPress site (default 'Just another WordPress site' title, lorem ipsum filler) hiding a malware loader behind an otherwise benign course page

Unranked domain with no legitimate reputation despite 4-year age

Domain age information unavailable

Details

Page Title

roydavid1.co.il – Just another WordPress site

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

The domain 'roydavid1.co.il' uses the Israeli country-code top-level domain (.co.il) while skipping any subdomain. Count 9 characters in 'roydavid1' with three vowels and five consonants, notching one digit. It segments into three words: roy, david, 1. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

12.36s

Total Load Time

3.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:49%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:he-IL

Text Length:4,368 chars

Detector Agreement:100%

Language mismatch: Declared as he-IL but detected as en

Website Classification

Primary Category

social media network96% confidence

Type: spa

Method: ml+structural

All Detected Categories

social media network

96%

technology software

41%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
18	64.225.107.120	Frankfurt am Main, Hesse, Germany	AS14061DigitalOcean, LLC
5	74.125.29.95Google · CDN	United States	AS15169Google LLC
5	54.192.35.64Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
5	34.243.35.227Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
5	192.178.170.95Google · CDN	United States	AS15169Google LLC
5	52.214.227.205Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
5	54.192.35.32Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
5	192.178.183.94Google · CDN	United States	AS15169Google LLC
5	54.192.35.71Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
5	142.251.127.97Google · CDN	United States	AS15169Google LLC
123	22	-	-