Security Report: jabrzoza.eu - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d10449bf-dcf3-4faa-a79e-1485df65d296 Domain and IP registration (RDAP)/api/v1/rdap/d10449bf-dcf3-4faa-a79e-1485df65d296How often this domain was scanned/api/v1/domain/stats/jabrzoza.eu Scan history for this domain/api/v1/domain/history/jabrzoza.eu?limit=15

This website contacted 35 IPs in 3 countries across 16 domains to perform 219 HTTP transactions. The main domain is jabrzoza.eu.

Submitted URL: https://jabrzoza.eu

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised 1-day-old restaurant site serving an injected ClickFix fake Cloudflare 'Human Verification' overlay that loads a blockchain-hosted payload and tricks Windows users into pasting Terminal commands; CRITICAL malware IDS alerts and multi-feed malware reputation confirm the kit.

Risk Factors (6)

Injected ClickFix fake human-verification overlay instructing Windows users to paste commands into Terminal

EtherHiding payload retrieval via blockchain smart contract and RPC calls

CRITICAL IDS malware alerts (ET MALWARE EtherHiding Exfil M2)

Multi-source threat-intel 'clearfake (malware)' match on the primary domain

Impersonation of Cloudflare branding in the fake verification overlay

Domain only 1 day old, unranked, hosting a restaurant-site facade while serving a malware kit

Domain age information unavailable

Details

Page Title

JA_BRZOZA – Poznań Stary Rynek, ul Żydowska 29, Poznań

Scan Type

public

Favicon Hash

MMH3: -2092130562

MD5: c6349e9b756eed6e5fafe4fef3ecd8fe

Domain Name Analysis

Within the .eu country-code top-level domain, 'jabrzoza.eu' is registered and has no subdomain. The second-level label 'jabrzoza' is 8 characters long with 3 vowels and 5 consonants. Tokenizing the label suggests 3 words: jabr, zo, za. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

10.17s

Total Load Time

5.8 MB

Total Size

Language Analysis

Primary Language

🇵🇱Polish

Code: pl

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pl-PL

Text Length:3,695 chars

Detector Agreement:75%

Website Classification

Primary Category

travel tourism49% confidence

Type: spa

Method: ml+structural

All Detected Categories

travel tourism

49%

real estate property

41%

adult content

33%

government public service

27%

education learning

27%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	109.95.159.1	Poland	AS48896dhosting.pl Sp. z o.o.
6	142.251.20.95Google · CDN	United States	AS15169Google LLC
6	172.217.118.4Google · CDN	United States	AS15169Google LLC
6	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	192.178.183.97Google · CDN	United States	AS15169Google LLC
6	142.251.14.94Google · CDN	United States	AS15169Google LLC
6	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
6	142.250.154.139Google · CDN	United States	AS15169Google LLC
6	142.251.154.119Google · CDN	United States	AS15169Google LLC
219	35	-	-