Security Report: yisan.cz - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fc186163-bed2-4538-afe4-17eb4ad666be Domain and IP registration (RDAP)/api/v1/rdap/fc186163-bed2-4538-afe4-17eb4ad666be Certificate Transparency/api/v1/ct/yisan.cz How often this domain was scanned/api/v1/domain/stats/yisan.cz Scan history for this domain/api/v1/domain/history/yisan.cz?limit=15

This website contacted 9 IPs in 2 countries across 7 domains to perform 230 HTTP transactions. The main domain is yisan.cz and was registered 23 years ago.

Submitted URL: https://yisan.cz

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Legitimate-looking Czech electronics trading site whose WordPress install has been compromised and serves an IClickFix/EtherHiding loader that fetches a malicious stage via Ethereum Sepolia and contacts the ClickFix handle zvh4.com — drive-by malware, do not visit.

Risk Factors (5)

Injected ClickFix / EtherHiding JavaScript loader on a compromised legitimate website

Critical IDS alerts for EtherHiding exfiltration and ClickFix command-and-control domain zvh4.com

Blockchain RPC (Ethereum Sepolia) used as a dead-drop/resolver for a malicious second stage

Malicious third-party domain zvh4.com confirmed by multiple threat-intel feeds

No credential/payment forms present (password=0, payment=0) — the threat is drive-by malware, not phishing

Domain age information unavailable

Details

Page Title

Yisan s.r.o – Your N°1 Worldwide Imports & Exports Partner

Scan Type

public

Favicon Hash

MMH3: 1114753944

MD5: ffd32aa7f2839e94e7ffbaf0115c52a3

Domain Name Analysis

Within the Czech country-code top-level domain (.cz), 'yisan.cz' is registered with no subdomain. The core label 'yisan' covers 5 characters split between 2 vowels and three consonants. Tokenizing the label suggests 3 words: y, is, an. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

28.19s

Total Load Time

44.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-GB

Text Length:6,002 chars

Detector Agreement:100%

Website Classification

Primary Category

entertainment media62% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

entertainment media

62%

healthcare medical

53%

corporate business

37%

documentation technical

29%

e-commerce shopping

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
30	37.9.175.212	Slovakia	AS51013WebSupport s.r.o.
25	142.251.13.95Google · CDN	United States	AS15169Google LLC
25	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
25	142.251.14.94Google · CDN	United States	AS15169Google LLC
25	142.251.20.95Google · CDN	United States	AS15169Google LLC
25	104.26.13.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
25	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
25	192.178.183.94Google · CDN	United States	AS15169Google LLC
25	142.251.20.94Google · CDN	United States	AS15169Google LLC
230	9	-	-