Security Report: atvrentalssedona.net - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/04c8f4d2-59de-4b2d-878e-45336152d1fd Domain and IP registration (RDAP)/api/v1/rdap/04c8f4d2-59de-4b2d-878e-45336152d1fdHow often this domain was scanned/api/v1/domain/stats/atvrentalssedona.net Scan history for this domain/api/v1/domain/history/atvrentalssedona.net?limit=15

This website contacted 17 IPs in 2 countries across 15 domains to perform 120 HTTP transactions. The main domain is atvrentalssedona.net and was registered 3 years 9 months ago.

Submitted URL: https://atvrentalssedona.net

Effective URL:

https://www.atvrentalssedona.net/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Real Sedona ATV rental site whose pages are compromised and serving an injected ClickFix/EtherHiding malware loader; no forms, but the page itself is malicious — do not open on Windows.

Risk Factors (5)

Injected ClickFix 'Human Verification' overlay kit (Win+X / Terminal) — directs Windows visitors to paste a malicious command

Blockchain-backed EtherHiding loader fetching overlay host from a smart contract, evading static blocklists

Script host cloud-browse.codes corroborated as malicious by three independent threat feeds

Critical IDS malware alerts plus Spamhaus DROP traffic observed during the scan

Legitimate Sedona ATV rental site appears compromised — infrastructure, not the business, is malicious

Domain age information unavailable

Details

Page Title

Red Rock ATV – LIVE YOUR ADVENTURE

Scan Type

public

Favicon Hash

MMH3: 1793188229

MD5: 908a791cc4c642a4621fd5c6c2dc13d4

Domain Name Analysis

The domain 'atvrentalssedona.net' uses the network infrastructure generic top-level domain (.net) and has no subdomain. The core label 'atvrentalssedona' covers 16 characters with six vowels and ten consonants. Tokenizing the label suggests three words: atv, rentals, sedona. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.48s

Total Load Time

3.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,984 chars

Detector Agreement:100%

Website Classification

Primary Category

travel tourism62% confidence

Type: spa

Method: ml+structural

All Detected Categories

travel tourism

62%

education learning

58%

entertainment media

56%

government public service

51%

social media network

37%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	104.130.255.68	United States	AS33070Rackspace Hosting
7	34.8.249.37Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
7	142.251.13.97Google · CDN	United States	AS15169Google LLC
7	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
7	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
7	34.168.224.78Google · CDN	The Dalles, Oregon, United States	AS396982Google LLC
7	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	52.8.202.147Aws · CLOUD	San Jose, California, United States	AS16509Amazon.com, Inc.
7	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
120	17	-	-