Security Scan Report: footballtrophyshoponline.risdpainter.com

Submitted: Completed: publiccompleted
This website contacted 18 IPs in 2 countries across 16 domains to perform 29 HTTP transactions. The main domain is risdpainter.com and was registered 17 years ago.

Submitted URL: https://footballtrophyshoponline.risdpainter.com/

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

Defaced subdomain declaring 'Hacked By AnonymousFox' and loading assets from domains with unverified phishing and AsyncRAT indicators; no credential forms, but the site appears compromised — avoid.

Risk Factors (3)
Website defacement / apparent compromise — page declares 'Hacked By AnonymousFox' in title, meta description and body text.
Page loads assets from domains with threat-intel reports, including one flagged as AsyncRAT malware (single-source, unverified).
Site is not in Cisco Umbrella top 1M and no legitimate business content is present under the shop-themed hostname.
Safety Factors (5)
No forms of any kind: 0 password, 0 disguised-password and 0 payment fields — no credential or payment harvesting on this page.
No JavaScript malware patterns (YARA) and no native-YARA high-precision hits.
No network IDS alerts and no credential exfiltration detected in the cross-origin analysis.
Threat-intel matches are all single-source and unverified, and none apply to the primary domain itself.
No concrete malicious signal: the threat-feed matches name third-party or shared hosts, or rest on a single feed or a reputation label, so they were not counted; no YARA / Safe-Browsing / IDS / credential form / brand impersonation either. Elevated risk rested on domain age or reputation alone; clamped from 8 to 5
Domain age information unavailable

Details

Page Title

Hacked By AnonymousFox

Scan Type

public

Domain Name Analysis

The domain 'footballtrophyshoponline.risdpainter.com' uses the commercial generic top-level domain (.com) and includes subdomain 'footballtrophyshoponline'. Its registrable label 'risdpainter' stretches across 11 characters holding 4 vowels versus 7 consonants. Breaking it apart gives four words: r, is, d, painter. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://footballtrophyshoponline.risdpainter.com/

Page Load Overview

2.75s
Total Load Time
1.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:268 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content28% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
28%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1267.20.76.123Phoenix, Arizona, United States
AS31898Oracle Corporation
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
165.21.235.194Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
1135.181.63.70Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
1142.251.152.4Google · CDNUnited States
AS15169Google LLC
1142.250.154.94Google · CDNUnited States
AS15169Google LLC
1142.251.151.4Google · CDNUnited States
AS15169Google LLC
1142.251.157.4Google · CDNUnited States
AS15169Google LLC
1142.251.154.4Google · CDNUnited States
AS15169Google LLC
1142.250.154.156Google · CDNUnited States
AS15169Google LLC
2918--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10392F6CC1EA062CBF00D19654EE16EE185250E6E4DC2D9561B7672FC4F9FA9B8F318C8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:FrE+VaE/tDJWg8YGzX197dKTCXzvC0w/JjloFdbI70bXUmW+j7NuvtH7rNCqssaA:F/6YGbpKoC7ubJkz+XUvtH7xu45G8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20098:HQIAAbTEFQIIEsAARYB1UC1AAiQAAH0QoIx8w0dzQJyWJB7FAVM8HkogTgv4XxmB4VgZCCCQATkEABJAaSsEkCaBSYkAqwBA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data