Security Report: restogro.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/91ff184b-4b51-4d30-b7fc-2d1477b169e5 Domain and IP registration (RDAP)/api/v1/rdap/91ff184b-4b51-4d30-b7fc-2d1477b169e5How often this domain was scanned/api/v1/domain/stats/restogro.com Scan history for this domain/api/v1/domain/history/restogro.com?limit=15

This website contacted 40 IPs in 4 countries across 31 domains to perform 114 HTTP transactions. The main domain is restogro.com and was registered 7 years ago.

Submitted URL: https://restogro.com

Effective URL:

https://www.restogro.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate-looking restaurant POS site whose pages are compromised with ClickFix/FileFix kits: fake 'I'm not a robot' / Microsoft 'Verify it's you' lures paste shell commands, backed by CRITICAL malware IDS alerts and clearfake/macOS-malware infrastructure. Do not interact.

Risk Factors (5)

Compromised/host-injected ClickFix + FileFix social-engineering kit on the page

Fake Microsoft account verification overlay instructing visitors to paste a clipboard command

Multiple CRITICAL malware IDS alerts (EtherHiding exfiltration) tied to the page's network activity

Third-party resources from clearfake-exploit-kit and macOS malware distribution domains (.cfd, interseq.at, renotad.com, cosmical2049.com)

Threat-intel tag on the primary domain itself as an iclickfix (malware) indicator

Domain age information unavailable

Details

Page Title

Restogro - Restaurant Management Software | Resaurant POS

Scan Type

public

Favicon Hash

MMH3: -874307316

MD5: 13b2a79e65d8d4ff61be11304dd59496

Domain Name Analysis

Domain 'restogro.com' uses the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'restogro' stretches across 8 characters split between 3 vowels and 5 consonants. Breaking it apart gives two words: resto, gro. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

9.55s

Total Load Time

5.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:3,120 chars

Detector Agreement:60%

Website Classification

Primary Category

technology software97% confidence

Type: spa

Method: ml+structural

All Detected Categories

technology software

97%

e-commerce shopping

74%

corporate business

46%

documentation technical

38%

corporate

35%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
36	3.6.147.143Aws · CLOUD	Mumbai, Maharashtra, India	AS16509Amazon.com, Inc.
2	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.16.248.249Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	74.125.29.95Google · CDN	United States	AS15169Google LLC
2	142.251.157.119Google · CDN	United States	AS15169Google LLC
2	142.251.110.97Google · CDN	United States	AS15169Google LLC
2	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.21.16.209Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
114	40	-	-