Security Scan: Gustavo's Cointab Dashboard

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/327d50cf-dd61-4b06-a196-222be42849e8 Domain and IP registration (RDAP)/api/v1/rdap/327d50cf-dd61-4b06-a196-222be42849e8How often this domain was scanned/api/v1/domain/stats/rentaride.top Scan history for this domain/api/v1/domain/history/rentaride.top?limit=15

This website contacted 12 IPs in 1 country across 11 domains to perform 48 HTTP transactions. The main domain is rentaride.top and was registered 3 months ago.

Submitted URL: https://rentaride.top/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Confirmed malicious: 66-day-old rentaride.top carries a multi-feed malware Indicator of Compromise, a ClickFix Win+X Terminal-lure kit with fake bot-check overlay, 19 CRITICAL EtherHiding C2 IDS alerts and a Gmail/PIN capture form. Do not interact.

Risk Factors (5)

Content-malware Indicator of Compromise on the primary domain corroborated by two independent threat-intelligence feeds

Known malicious ClickFix (Win+X Terminal paste) kit confirmed by analyst-vetted roster and hunting rule

Fake 'not a robot' security-verification overlay used to social-engineer command execution

Repeated CRITICAL IDS alerts for EtherHiding malware exfiltration (19 hits)

Credential-capture login form (Gmail + Administrator PIN) on a new, unranked domain combined with blockchain RPC/drainer infrastructure

Domain age information unavailable

Details

Page Title

Gustavo's Cointab Dashboard

Scan Type

public

Domain Name Analysis

Domain 'rentaride.top' uses the .top top-level domain without a subdomain. The core label 'rentaride' covers 9 characters split between 4 vowels and 5 consonants. Splitting it apart reveals three words: rent, a, ride. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

(} GUSTAVO'S COINTAB PRIVATE MONITORING DASHBOARD Enter the registered Gmail and Administrator PIN. Registered Gmail customer@gmail.com Administrator PIN Current launcher PIN CONTINUE SECURE LO...

Page Load Overview

2.56s

Total Load Time

392 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:4,929 chars

Detector Agreement:100%

Website Classification

Primary Category

technology software62% confidence

Type: webapp

Method: ml+structural

All Detected Categories

technology software

62%

entertainment media

54%

cryptocurrency blockchain

44%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	172.67.205.47Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.21.66.144Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
4	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
48	12	-	-