app.nosh.guide
Category: Technology
Fixed it? Get app.nosh.guide re-reviewed in 3 steps
Each security engine decides its own verdict, and most re-review a site within a few days of being asked. Start once the site is clean.
- 1Make sure it's goneRemove any injected code, update the site software and change admin passwords.
- 2Ask the 2 engines to re-reviewalphaMountain.ai and Sophos flag it, and only they can remove their flags. Clean the site first, then ask each of them to check it again.
- 3Tell us it's fixedDispute this score and choose “Issue has been resolved”. After you confirm your email, a person reviews it, usually within 1-2 business days.
Steps 1-3 are free
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of app.nosh.guide
app.nosh.guide appears to be a web application for the NOSH platform, presented in Russian and aimed at restaurants and hospitality businesses. The landing page promotes business-management features such as digital checks and cashless payments, analytics and reporting, and QR-based digital menus and ordering. The page shown is a registration screen rather than a public marketing homepage, suggesting this subdomain is intended for account access or onboarding.
Based on the branding and on-page text, the service appears to focus on operational tools for food-service venues rather than general consumer content. The domain structure also suggests this is an application subdomain connected to a broader NOSH service, likely used by merchants or staff to manage restaurant-related workflows.
Safety Assessment for app.nosh.guide
Scan results are mixed at the time of this scan. A small number of security engines flagged the domain with spam-related labels, while the malware scan did not identify any flagged files, and the checked threat databases for phishing and malware distribution did not report listings. The page content shown in the screenshot appears consistent with a business software registration portal rather than an obvious fake giveaway or credential-harvesting page.
There is, however, a minor reputation concern: the domain's IP address is listed on one mail-reputation blocklist. That type of listing can sometimes reflect email or shared-hosting reputation rather than the website content itself, so it should be treated as a cautionary signal rather than conclusive evidence of harmful activity. The domain is also not ranked in major traffic lists, which can make independent reputation assessment more limited.
Based on available scan data, no direct malware or phishing indicators were detected at the time of this scan, but the spam-related detections and the mail-reputation listing suggest some caution may be warranted until more reputation data is available.
Technical Description
The site uses a valid Let's Encrypt SSL certificate, which indicates HTTPS is configured. It is hosted on infrastructure associated with Yandex.Cloud LLC, served by nginx, and resolves to an IP address geolocated to Moscow, Russia. The nameservers also point to Yandex Cloud, suggesting a relatively standard cloud-hosted deployment.
DNSSEC appears to be unsigned, so DNS responses may not benefit from DNSSEC validation. No malicious files were reported by the malware scan, and the observed resource paths look like a typical modern JavaScript application build. The main technical cautions at the time of this scan are the lack of DNSSEC and the single mail-reputation blocklist listing tied to the IP address.
Share your experience with this website. Was it safe? Did you encounter any issues?