Security Report: fressroom.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/dd5d274f-b282-4eaf-a535-5105c9f202e8 Domain and IP registration (RDAP)/api/v1/rdap/dd5d274f-b282-4eaf-a535-5105c9f202e8 Certificate Transparency/api/v1/ct/fressroom.com How often this domain was scanned/api/v1/domain/stats/fressroom.com Scan history for this domain/api/v1/domain/history/fressroom.com?limit=15

This website contacted 22 IPs in 3 countries across 16 domains to perform 251 HTTP transactions. The main domain is fressroom.com and was registered 5 years ago.

Submitted URL: https://fressroom.com

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Aged Hebrew food site likely compromised and injected with EtherHiding malware: critical IDS 'ET MALWARE EtherHiding Exfil' alerts plus blockchain RPC C2 lookups. Avoid submitting data until the site is cleaned.

Risk Factors

CRITICAL network IDS malware alert (EtherHiding exfil) — indicates a compromised/injected page contacting malicious C2 infrastructure

Page loads multiple blockchain RPC smart-contract domains associated with EtherHiding malware that hides C2 configs in chain contracts

Domain appears in malware-loader threat-intel reporting

Dynamic code generation via Function() constructor on a content site

Domain age information unavailable

Details

Page Title

FressRoom – Home Cooking

Scan Type

public

Favicon Hash

MMH3: 1094409545

MD5: 3aac1ef30f00a34c14899c2e5af3fac6

Domain Name Analysis

The domain 'fressroom.com' uses the commercial generic top-level domain (.com). The core label 'fressroom' covers 9 characters with three vowels and six consonants. Splitting it apart reveals 4 words: f, res, s, room. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

29.49s

Total Load Time

3.4 MB

Total Size

Language Analysis

Primary Language

🇮🇱Hebrew

Code: he

Confidence:80%

Script:Hebrew

Direction:rtl

Detection Details

HTML Lang Attribute:he-IL

Text Length:3,731 chars

Detector Agreement:75%

Website Classification

Primary Category

blog personal website61% confidence

Type: spa

Method: ml+structural

All Detected Categories

blog personal website

61%

adult content

54%

education learning

35%

healthcare medical

33%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	192.116.146.41	Pardes Hanna Karkur, Haifa, Israel	AS12400Partner Communications Ltd.
11	142.251.20.97Google · CDN	United States	AS15169Google LLC
11	142.251.127.95Google · CDN	United States	AS15169Google LLC
11	142.251.13.95Google · CDN	United States	AS15169Google LLC
11	172.66.171.172Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	50.6.225.134	Ashburn, Virginia, United States	AS31898Oracle Corporation
11	172.217.115.4Google · CDN	United States	AS15169Google LLC
11	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
11	193.32.220.135	Frankfurt am Main, Hesse, Germany	AS48314IP-Projects GmbH & Co. KG
251	22	-	-