Security Scan: Arrebol Website : Arrebol Website

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/157b78c7-fd22-410f-b552-cedb4a5bd80f Domain and IP registration (RDAP)/api/v1/rdap/157b78c7-fd22-410f-b552-cedb4a5bd80f Certificate Transparency/api/v1/ct/arrebolcap.com How often this domain was scanned/api/v1/domain/stats/arrebolcap.com Scan history for this domain/api/v1/domain/history/arrebolcap.com?limit=15

This website contacted 13 IPs in 2 countries across 11 domains to perform 40 HTTP transactions. The main domain is arrebolcap.com and was registered 1 month ago.

Submitted URL: https://arrebolcap.com/

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate-looking Arrebol Capital site is compromised and serving an ErrTraffic/Exvicy ClickFix injection: a fake Cloudflare 'Human Verification' overlay that tricks Windows users into pasting a malicious Terminal command. Confirmed by two CRITICAL YARA kit matches and CRITICAL IDS malware alerts.

Risk Factors (5)

Known malicious ClickFix/ErrTraffic injection kit present in the page HTML (analyst-vetted roster match)

Fake Cloudflare 'Human Verification' overlay impersonating the Cloudflare brand to social-engineer users into running a Terminal command

Network IDS reports command-and-control/exfiltration traffic (EtherHiding Exfil) and ClickFix domain contact

Threat intelligence flags the primary domain as malware (clearfake) and several loaded third-party domains as malicious or attack-related

Blockchain RPC connections consistent with EtherHiding-style payload retrieval used by the injected loader

Domain age information unavailable

Details

Page Title

Arrebol Website : Arrebol Website

Scan Type

public

Favicon Hash

MMH3: -1665060132

MD5: 96440c261453061170566fd287b5fb7b

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'arrebolcap.com' is registered while skipping any subdomain. The core label 'arrebolcap' covers 10 characters holding 4 vowels versus 6 consonants. Splitting it apart reveals four words: ar, re, bol, cap. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

9.38s

Total Load Time

1.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,770 chars

Detector Agreement:60%

Website Classification

Primary Category

documentation technical86% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

86%

technology software

85%

cryptocurrency blockchain

83%

phishing scam

76%

government public service

75%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	162.215.248.204	United States	AS46606Unified Layer
3	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	192.178.183.97Google · CDN	United States	AS15169Google LLC
3	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
3	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	216.239.32.36Google · CDN	United States	AS15169Google LLC
3	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
40	13	-	-