Security Report: beerbalco.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/dc470e0d-e1d3-44c0-833e-aec806dcea39 Domain and IP registration (RDAP)/api/v1/rdap/dc470e0d-e1d3-44c0-833e-aec806dcea39How often this domain was scanned/api/v1/domain/stats/beerbalco.com Scan history for this domain/api/v1/domain/history/beerbalco.com?limit=15

This website contacted 15 IPs in 2 countries across 15 domains to perform 138 HTTP transactions. The main domain is beerbalco.com and was registered 7 years ago.

Submitted URL: https://beerbalco.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate, well-established accounting site (beerbalco.com) that has been compromised: it serves an analyst-vetted ClickFix/EtherHiding kit with a fake Cloudflare 'Human Verification' overlay and critical malware IDS alerts.

Risk Factors (5)

Analyst-vetted ClickFix (Win+X -> Terminal) phishing kit injected into the page, roster-anchored YARA match

EtherHiding blockchain-contract loader fetching the overlay host — CRITICAL IDS malware alerts

Fake Cloudflare-style 'Human Verification' / security-check overlay impersonating Cloudflare

Primary domain flagged as content malware (clearfake) by two independent threat feeds

Obfuscated injected script contacting threat-feed hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co)

Domain age information unavailable

Details

Page Title

Beerbal&Co | one-stop shop for accounting and advisory

Scan Type

public

Favicon Hash

MMH3: -1161682571

MD5: 974fa7bbf169c6535f0fe6946f0451ba

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'beerbalco.com' is registered without a subdomain. Count 9 characters in 'beerbalco' with 4 vowels and 5 consonants. Word splitting yields three words: beer, bal, co. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

9.28s

Total Load Time

6.9 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:6,351 chars

Detector Agreement:100%

Website Classification

Primary Category

blog personal website58% confidence

Type: spa

Method: ml+structural

All Detected Categories

blog personal website

58%

social media network

54%

technology software

52%

corporate business

51%

download file sharing

49%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	5.172.176.101	St Louis, Missouri, United States	AS7393CYBERCON, INC.
9	142.251.20.97Google · CDN	United States	AS15169Google LLC
9	142.251.14.95Google · CDN	United States	AS15169Google LLC
9	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
9	104.21.3.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
9	216.239.32.36Google · CDN	United States	AS15169Google LLC
9	142.251.14.94Google · CDN	United States	AS15169Google LLC
9	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
138	15	-	-