Security Scan Report: goodtimes.coffee

Site favicon
Submitted: Oct 9, 2026, 5:47:26 PMCompleted: Oct 9, 2026, 5:48:26 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate-looking coffee shop whose primary domain is flagged as ClearFake malware by two threat feeds and which loads unexpected BSC testnet blockchain RPC endpoints — likely a compromised site serving injected malicious scripts.

Risk Factors (2)
Primary domain matched in two independent threat-intelligence feeds as ClearFake malware
Outbound connections to BSC/Binance testnet blockchain RPC nodes from a non-crypto retail page (injected-script / wallet-drainer pattern)
Domain age information unavailable

Details

Page Title

Úvod - Good Times

Scan Type

public

Domain Name Analysis

You're looking at domain 'goodtimes.coffee' on the .coffee top-level domain while skipping any subdomain. The second-level label 'goodtimes' is 9 characters long split between 4 vowels and five consonants. Splitting it apart reveals two words: good, times. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://goodtimes.coffee

Page Load Overview

4.94s
Total Load Time
2.9 MB
Total Size

Language Analysis

Primary Language

🇸🇰SK
Code: sk
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:sk-SK
Text Length:1,897 chars
Detector Agreement:67%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2486.110.243.207Bratislava, Bratislava Region, Slovakia
AS29405VNET a.s.
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
5104.18.18.183Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
515.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
53.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
552.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
5104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
53.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11920--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T113046C32B6592827626F83CFA003326C509BD75ADA514DF8F5F9436896F0DF1328367A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:ZU63AkzARASKAyl8maNcZ10A29ApiTFjVXFzuTZPs0uG+RlV+MPGzv/1F0jyvW1u:sT6YkwTZpXtuTZs0uG+R+MPyDb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:177661:CV6RQCDgaAPgTUKBDFkRWgVQXGAQTwAEEJWYEPCCkEBBhyhgMAEQmMMEAFHZAAAcBjkchoSsJRG0QoVQYpAEgJOEABiCAjcK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:008f8f8fcfffffe7
Perceptual Hash:b83846c74363477e
Difference Hash:63341e1e18462aaa
Wavelet Hash:008b83878fefcbc3
Color Hash:#d66ce0

Scan History

Scan history not available

Unable to load historical scan data