Security Scan: Rara Noodles

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fb30f1a4-69e3-4984-a450-7b1e58a27bc2 Domain and IP registration (RDAP)/api/v1/rdap/fb30f1a4-69e3-4984-a450-7b1e58a27bc2How often this domain was scanned/api/v1/domain/stats/raranoodles.com Scan history for this domain/api/v1/domain/history/raranoodles.com?limit=15

This website contacted 29 IPs in 2 countries across 14 domains to perform 104 HTTP transactions. The main domain is raranoodles.com and was registered 2 years 8 months ago.

Submitted URL: https://raranoodles.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Compromised legitimate noodle site now serving a ClickFix fake-Cloudflare overlay that tells Windows users to paste attacker commands into PowerShell; primary domain flagged as malware. Do not follow the verification steps.

Risk Factors (5)

Fake Cloudflare 'verification' overlay instructing users to paste commands into Windows Terminal/PowerShell (ClickFix technique)

Primary domain flagged as 'iclickfix' malware by two independent threat feeds

19 CRITICAL IDS alerts for malware/trojan (EtherHiding Exfil M2)

YARA high-precision hit for a known malicious ClickFix kit family

Obfuscated/dynamic script execution (5 eval() calls) on a page that should not require them

Domain age information unavailable

Details

Page Title

Rara Noodles

Scan Type

public

Favicon Hash

MMH3: -522891306

MD5: 022d7be55fda28161260381cb289e33c

Domain Name Analysis

You're looking at domain 'raranoodles.com' on the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'raranoodles' stretches across 11 characters with five vowels and six consonants. Tokenizing the label suggests 3 words: rar, a, noodles. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.22s

Total Load Time

3.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:1,942 chars

Detector Agreement:75%

Website Classification

Primary Category

technology software75% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

75%

documentation technical

65%

phishing scam

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	172.67.205.98Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	192.250.235.29	Singapore	AS204800WHG Hosting Services Ltd
3	104.16.80.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.154.4Google · CDN	United States	AS15169Google LLC
3	142.251.20.94Google · CDN	United States	AS15169Google LLC
3	104.21.77.76Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.16.79.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.151.4Google · CDN	United States	AS15169Google LLC
3	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
3	142.251.153.4Google · CDN	United States	AS15169Google LLC
104	29	-	-