ScanMalware.com

Security Scan Report: cocohostel.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f233735a-dfa6-42b8-9556-feef46981aceDomain and IP registration (RDAP)/api/v1/rdap/f233735a-dfa6-42b8-9556-feef46981aceHow often this domain was scanned/api/v1/domain/stats/cocohostel.comScan history for this domain/api/v1/domain/history/cocohostel.com?limit=15
This website contacted 12 IPs in 2 countries across 4 domains to perform 109 HTTP transactions. The main domain is cocohostel.com and was registered 4 years 6 months ago.

Submitted URL: https://cocohostel.com

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

A genuine Bali hostel site whose domain is flagged as 'clearfake' malware by two feeds and whose scripts load payloads via Binance Smart Chain RPC nodes — a compromised-site malware (EtherHiding) pattern.

Risk Factors (3)
Multi-source corroborated threat-intel IoC (clearfake malware) on the primary domain
Blockchain RPC (BSC testnet) fetch connections from page scripts — EtherHiding/ClearFake loader pattern
Unranked domain reputation
Domain age information unavailable

Details

Page Title

COCO & PINEAPPLE PANTS

Scan Type

public

Domain Name Analysis

The domain name 'cocohostel.com' uses the commercial generic top-level domain (.com). The core label 'cocohostel' covers 10 characters with four vowels and 6 consonants. Tokenizing the label suggests 2 words: coco, hostel. Average segment length settles at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cocohostel.com

Page Load Overview

10.68s
Total Load Time
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:4,208 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10153.92.9.48Jakarta, Jakarta, Indonesia
AS47583Hostinger International Limited
9142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
93.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
9172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
935.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
9104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
93.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
915.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
9104.18.10.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.20.95Google · CDNUnited States
AS15169Google LLC
10912--

Detected Technologies9

JQueryv1.12.4
100%
LiteSpeed
40%
Hostinger
40%
HTTP/3
40%
HSTS
40%
jQuery UI
20%
OWL Carousel
20%
Moment.js
20%
Cloudbeds
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T186E3C676D5E944370683C1D4EAA52F2EAE82F20BDA074D58F2FC06E54FD6E97C813609

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:lpCG5qDJDtTjct6/DYgkQOmRpyCLNuAHdgzH8gHHXaKTKEsAvE3ZxTQGt58/6iZc:l0GwDJD94t6/kgwYijznhTKe6lnqM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:153735:ICBrEAl6oCUETJRyV0dFAJSSVHANGADC0XAAEfCKIbBniAgEERgaMUMlgQEDQgQIwEApgEoFrEFA1jACtUBLEIgI5KxSDhAK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data