Security Report: casabambuhn.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/42530674-8519-47d0-a388-3cc9f6f4bcc7 Domain and IP registration (RDAP)/api/v1/rdap/42530674-8519-47d0-a388-3cc9f6f4bcc7How often this domain was scanned/api/v1/domain/stats/casabambuhn.com Scan history for this domain/api/v1/domain/history/casabambuhn.com?limit=15

This website contacted 28 IPs in 2 countries across 12 domains to perform 178 HTTP transactions. The main domain is casabambuhn.com and was registered 3 years 2 months ago.

Submitted URL: https://casabambuhn.com

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Legitimate-looking Honduran event venue whose own domain is flagged as ClearFake malware and whose page triggers CRITICAL EtherHiding/ClickFix IDS alerts — signals of a compromised site serving injected malware. Do not interact.

Risk Factors (4)

Content-malware Indicator of Compromise against the primary domain (ClearFake, two corroborating feeds)

CRITICAL IDS malware alerts for EtherHiding exfiltration and ClickFix domain contact

Third-party resource hosts (checkyoubrowse.codes, polygon.gateway.tenderly.co) flagged malicious / tied to blockchain-based malware delivery

Signs of injected/obfuscated script loading blockchain RPC endpoints (EtherHiding technique) on an otherwise benign page

Domain age information unavailable

Details

Page Title

Inicio - Casa Bambú - Centro de Eventosother network

Scan Type

public

Favicon Hash

MMH3: 1976357228

MD5: a9d2f456450e561936f2a569196f1303

Domain Name Analysis

The domain 'casabambuhn.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'casabambuhn' is 11 characters long split between four vowels and 7 consonants. Breaking it apart gives 4 words: casaba, m, buh, n. Expect two characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

9.03s

Total Load Time

59.5 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:18,279 chars

Detector Agreement:100%

Website Classification

Primary Category

phishing scam94% confidence

Type: spa

Method: ml+structural

All Detected Categories

phishing scam

94%

government public service

91%

real estate property

90%

entertainment media

87%

finance banking

86%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	104.21.16.82Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.110.97Google · CDN	United States	AS15169Google LLC
6	192.178.183.95Google · CDN	United States	AS15169Google LLC
6	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
6	142.251.110.94Google · CDN	United States	AS15169Google LLC
6	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
6	216.239.32.36Google · CDN	United States	AS15169Google LLC
6	172.67.166.244Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.250.154.97Google · CDN	United States	AS15169Google LLC
6	142.251.110.95Google · CDN	United States	AS15169Google LLC
178	28	-	-