Security Report: www.3ob.fr - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/123dec7d-c2d2-4a50-9f3f-d57cfa8f224b Domain and IP registration (RDAP)/api/v1/rdap/123dec7d-c2d2-4a50-9f3f-d57cfa8f224b Certificate Transparency/api/v1/ct/3ob.fr How often this domain was scanned/api/v1/domain/stats/3ob.fr Scan history for this domain/api/v1/domain/history/3ob.fr?limit=15

This website contacted 8 IPs in 3 countries across 7 domains to perform 115 HTTP transactions. The main domain is 3ob.fr and was registered 5 years ago.

Submitted URL: https://www.3ob.fr

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Compromised legitimate site injecting a ClickFix 'Human Verification' overlay with an EtherHiding blockchain loader; kit roster, YARA and CRITICAL IDS alerts confirm active malware distribution. Do not visit or interact.

Risk Factors (6)

Injected ClickFix malware kit delivering a fake 'Human Verification' overlay that instructs Windows users to run PowerShell/Terminal commands

EtherHiding / blockchain-contract-hosted second stage retrieved via Tenderly, Ankr, drpc, blastapi and 1rpc RPC endpoints

Obfuscated script hides threat-feed C2 hosts until decoded

Multiple CRITICAL IDS alerts for ClickFix and EtherHiding exfiltration

Malware threat-intel match on the primary domain corroborated by two independent feeds

Injected third-party SEO-spam content (illegal casino, adult, betting pages) on a compromised business website

Domain age information unavailable

Details

Page Title

Accueil - 3OB

Scan Type

public

Favicon Hash

MMH3: -2125153908

MD5: a60a7929e70e2cf5b555e1027a9e8311

Domain Name Analysis

Domain 'www.3ob.fr' uses the French country-code top-level domain (.fr); it also runs on subdomain 'www'. The core label '3ob' covers 3 characters with 1 vowel and 1 consonant, notching one digit. Splitting it apart reveals 2 words: 3, ob. Median word length is 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

15.67s

Total Load Time

7.1 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:5,089 chars

Detector Agreement:67%

Website Classification

Primary Category

corporate35% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate

35%

government public service

34%

documentation technical

28%

corporate business

27%

real estate property

26%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	109.234.164.80	France	AS50474O2switch SAS
14	142.251.110.95Google · CDN	United States	AS15169Google LLC
14	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
14	142.250.154.94Google · CDN	United States	AS15169Google LLC
14	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
14	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
14	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
14	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
115	8	-	-