ScanMalware.com

Security Scan Report: rodsua.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/558cbe25-b008-4c31-b66d-4c0d76652656Domain and IP registration (RDAP)/api/v1/rdap/558cbe25-b008-4c31-b66d-4c0d76652656How often this domain was scanned/api/v1/domain/stats/rodsua.comScan history for this domain/api/v1/domain/history/rodsua.com?limit=15
This website contacted 14 IPs in 2 countries across 13 domains to perform 105 HTTP transactions. The main domain is rodsua.com and was registered 2 years 9 months ago.

Submitted URL: https://rodsua.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate-looking industrial site is compromised and injects a ClickFix fake-CAPTCHA that tricks visitors into running PowerShell, with EtherHiding blockchain-based malware delivery (multiple CRITICAL IDS alerts).

Risk Factors (5)
Fake CAPTCHA / ClickFix lures users into running PowerShell commands
EtherHiding exfiltration IDS alerts (CRITICAL, x10)
Blockchain RPC connections used to pull payload/commands from smart contracts
Primary domain IoC for malware
Obfuscated dynamic JavaScript (eval) on a simple corporate site
Domain age information unavailable

Details

Page Title

MSI RODSUA | Mantenimientos y suministros integrales

Scan Type

public

Domain Name Analysis

Domain 'rodsua.com' uses the commercial generic top-level domain (.com). The core label 'rodsua' covers 6 characters with 3 vowels and 3 consonants. It segments into three words: rods, u, a. The median word length lands at 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rodsua.com

Page Load Overview

15.04s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:3,246 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate business88% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
88%
government public service
68%
documentation technical
49%
corporate
35%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14142.251.14.95Google · CDNUnited States
AS15169Google LLC
7162.241.62.58Vinhedo, São Paulo, Brazil
AS31898Oracle Corporation
7172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7192.178.183.94Google · CDNUnited States
AS15169Google LLC
715.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
7172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
73.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
752.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
715.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
10514--

Detected Technologies9

X-UA-Compatible
100%
WordPressv7.1
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Joinchat
20%
Easy Pie Chart
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DC341AAE5BB13774B0178356EEC6B76C92BCC213D5024DD9FCF2601897822E611B668F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:cRVyp9reB4kQow9Gi4/B/1LuArCpaux04dBZK9elPkLU/Q39Qbh6xc7HJ0wh85c0:cRQ6B4kQow/sKr0jLZ3mPmjE/0x

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:241784:BYjAIC44CoCklAmAhwx7BLVFEpBIJGqABSBwYFAIFMrqBUAaSTbUcKAQIDAgShALSXaQ2dGQU4oBQEBkMFSASTERAE8ZZghK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffffffff
Perceptual Hash:f46e6e6e26226343
Difference Hash:2e00000000000000
Wavelet Hash:0000fefe02020202
Color Hash:#5e2d86

Other Hashes

Crop Resistant:2e00000000000000,0020d0c8c8c83040

Scan History

Scan history not available

Unable to load historical scan data