Security Report: cremola.com.ro - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3a298cce-ef65-4f4f-b67e-e5da89706636 Domain and IP registration (RDAP)/api/v1/rdap/3a298cce-ef65-4f4f-b67e-e5da89706636How often this domain was scanned/api/v1/domain/stats/cremola.com.ro Scan history for this domain/api/v1/domain/history/cremola.com.ro?limit=15

This website contacted 15 IPs in 3 countries across 13 domains to perform 115 HTTP transactions. The main domain is cremola.com.ro and was registered 9 years ago.

Submitted URL: https://cremola.com.ro

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

A 9-year-old Romanian ice-cream brand site whose pages load blockchain RPC gateways and trigger CRITICAL EtherHiding/ClickFix malware IDS alerts; likely compromised to serve malware to visitors, though the site itself has no forms or impersonation.

Risk Factors (3)

Critical IDS malware alerts (EtherHiding exfiltration, ClickFix domain) tied to the page's own network traffic

Page loads multiple smart-chain/blockchain RPC gateways used for covert payload delivery

Primary domain flagged as a malware loader by threat intelligence

Domain age information unavailable

Details

Page Title

Desertul Cremola - Made in Romania

Scan Type

public

Favicon Hash

MMH3: -1997441711

MD5: 087e1260b1ee89ba6c1ffbeaa215c981

Domain Name Analysis

Domain 'cremola.com.ro' uses the Romanian country-code top-level domain (.com.ro) and has no subdomain. The core label 'cremola' covers 7 characters containing three vowels alongside 4 consonants. Segmentation suggests 3 words: c, remo, la. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.03s

Total Load Time

5.1 MB

Total Size

Language Analysis

Primary Language

🇷🇴Romanian

Code: ro

Confidence:42%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,047 chars

Detector Agreement:75%

Language mismatch: Declared as en-US but detected as ro

Website Classification

Primary Category

healthcare medical97% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

97%

blog personal website

73%

government public service

70%

adult content

50%

education learning

45%

Detected Features

Articles

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	77.81.2.175	Romania	AS5606GTS Telecom SRL
7	142.250.154.97Google · CDN	United States	AS15169Google LLC
7	142.251.127.95Google · CDN	United States	AS15169Google LLC
7	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
7	142.251.13.94Google · CDN	United States	AS15169Google LLC
7	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	216.239.34.36Google · CDN	United States	AS15169Google LLC
7	142.251.127.154Google · CDN	United States	AS15169Google LLC
7	142.251.14.94Google · CDN	United States	AS15169Google LLC
115	15	-	-