Security Scan: Rosales 20

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d96a3398-d3a6-44e0-acdc-eb97ceacce03 Domain and IP registration (RDAP)/api/v1/rdap/d96a3398-d3a6-44e0-acdc-eb97ceacce03How often this domain was scanned/api/v1/domain/stats/rosales20bar.com Scan history for this domain/api/v1/domain/history/rosales20bar.com?limit=15

This website contacted 24 IPs in 2 countries across 20 domains to perform 56 HTTP transactions. The main domain is rosales20bar.com and was registered 2 years 8 months ago.

Submitted URL: https://rosales20bar.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Legitimate restaurant site that has been compromised and now injects a ClickFix 'Human Verification' overlay using blockchain EtherHiding to deliver malware; never follow its Win+X/Terminal instructions.

Risk Factors (6)

Compromised restaurant website serving a ClickFix/terminal-paste malware overlay

Fake 'Human Verification' / Cloudflare-style security challenge impersonating Cloudflare

EtherHiding: script resolves next-stage payload from blockchain smart contracts (Polygon/BSC testnet RPC calls)

Threat-intel verdict of malware on the primary domain and URL from two independent feeds

Hidden threat-feed hosts and an exploit-kit-ranked script host (cloud-browse.codes) loaded by obfuscated JavaScript

Static Ethereum contract get()/getDomain() requests observed by IDS consistent with blockchain-based payload lookup

Domain age information unavailable

Details

Page Title

Rosales 20

Scan Type

public

Favicon Hash

MMH3: 2048498812

MD5: 655ee0b588731ee6db69fec212c15500

Domain Name Analysis

The domain name 'rosales20bar.com' uses the commercial generic top-level domain (.com). The registrable portion 'rosales20bar' spans 12 characters split between 4 vowels and six consonants, along with two digits. Tokenizing the label suggests 3 words: rosales, 20, bar. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

1.26s

Total Load Time

2.9 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:3,450 chars

Detector Agreement:50%

Website Classification

Primary Category

corporate50% confidence

Type: spa

Method: structural

All Detected Categories

corporate

50%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	217.160.0.173	Germany	AS8560IONOS SE
2	104.18.19.62Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	74.125.29.95Google · CDN	United States	AS15169Google LLC
2	142.251.110.97Google · CDN	United States	AS15169Google LLC
2	104.18.22.56Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.14.94Google · CDN	United States	AS15169Google LLC
2	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	216.239.32.36Google · CDN	United States	AS15169Google LLC
56	24	-	-