ScanMalware.com

Security Scan Report: lallotjamarisqueria.es

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c11c44d5-d27c-404d-b89a-6f2c9d9d7789Domain and IP registration (RDAP)/api/v1/rdap/c11c44d5-d27c-404d-b89a-6f2c9d9d7789How often this domain was scanned/api/v1/domain/stats/lallotjamarisqueria.esScan history for this domain/api/v1/domain/history/lallotjamarisqueria.es?limit=15
This website contacted 11 IPs in 3 countries across 8 domains to perform 77 HTTP transactions. The main domain is lallotjamarisqueria.es.

Submitted URL: https://lallotjamarisqueria.es

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Legitimate restaurant site compromised with ErrTraffic/Exvicy loader and a fake Cloudflare ClickFix overlay that tells Windows users to paste Terminal commands; EtherHiding malware delivery confirmed. Do not visit or interact.

Risk Factors (6)
Compromised WordPress restaurant site injected with the ErrTraffic/Exvicy loader and a ClickFix social-engineering overlay
Fake 'Human Verification' / Cloudflare challenge instructing visitors to paste attacker-supplied commands into Windows Terminal (PowerShell)
EtherHiding malware delivery via blockchain RPC smart-contract lookups used to fetch the next stage
CRITICAL IDS malware alert (EtherHiding Exfil) and obfuscated inline JavaScript using Base64/XOR decode plus Function() constructor
Safe Browsing 'Unwanted Software' verdict and a single-source malware loader report for the domain
Unranked third-party script host browse-cloud.codes serving JavaScript to the page
Domain age information unavailable

Details

Page Title

La Llotja Marisqueria - Restaurant Vilanova i la Geltrú

Scan Type

public

Domain Name Analysis

The domain 'lallotjamarisqueria.es' uses the Spanish country-code top-level domain (.es) with no subdomain. The core label 'lallotjamarisqueria' covers 19 characters with 9 vowels and ten consonants. Splitting it apart reveals 5 words: lal, lot, jama, risque, ria. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Esta página utiliza cookies y otras tecnologías para que podamos mejorar su experiencia en nuestros sitios: Más información.

Page Load Overview

5.59s
Total Load Time
4.7 MB
Total Size

Language Analysis

Primary Language

🇪🇸CA
Code: ca
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:ca
Text Length:3,351 chars
Detector Agreement:50%

All Detected Languages

🇪🇸ca(81%)🇺🇸en(10%)🇪🇸es(6%)🇩🇪de(3%)

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
51217.72.207.10Spain
AS8560IONOS SE
72.20.245.133Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
7142.250.154.95Google · CDNUnited States
AS15169Google LLC
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
723.2.13.67Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
7104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
72.16.168.100Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
72.16.10.169Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
7188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7711--

Detected Technologies18

X-UA-Compatible
100%
WordPressv5.8.19
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.6.0
100%
MySQL
50%
PHPv7.4.33
40%
Nginx
40%
HSTS
40%
Yoast SEO Premiumv9.2.1
30%
Typekit
30%
Adobe Fonts
30%
wpBakery
20%
jQuery Migrate
20%
Web Font Loader
20%
WPMLv4.3.15
20%
FlexSlider
20%
Contact Form 7
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T143F329324C19242D50078EC0E0D83B59B8EDC643DB535AD6F2FD6B69C7C9ECC66A221E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:BJ3hmSUl4SttXUtixEpHHjMYA0j/AMjq0kmvf3Mfa7JrmwaXnTMro/ZDgDuUXk47:BJo4VbXk47

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:160862:DVpABAMikAsBCEgOQLXREUUgGcBjP1PACASUNEikACSIEGdHoBjqCMBAlLBOhAbZkQgpEB2EURs0gAgNhCSzAhCCnICjJiKL

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0303033d3d030101
Perceptual Hash:8a2431e3ce4d7177
Difference Hash:ffff17696997fbfb
Wavelet Hash:0707033f3f0f0f0f
Color Hash:000000001c0

Other Hashes

Crop Resistant:fa802b8e8c8c88f2,ffff17696997fbfb

Scan History

Scan history not available

Unable to load historical scan data