Security Report: terramare.pt - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3578531d-a4e0-4641-8d0b-9dc15d3fd4e0 Domain and IP registration (RDAP)/api/v1/rdap/3578531d-a4e0-4641-8d0b-9dc15d3fd4e0How often this domain was scanned/api/v1/domain/stats/terramare.pt Scan history for this domain/api/v1/domain/history/terramare.pt?limit=15

This website contacted 12 IPs in 4 countries across 10 domains to perform 38 HTTP transactions. The main domain is terramare.pt.

Submitted URL: https://terramare.pt

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Compromised/malicious page serving a fake Cloudflare 'verification' ClickFix prompt that tells users to run a terminal command, with EtherHiding exfiltration and blockchain RPC traffic. Do not interact.

Risk Factors (5)

Fake Cloudflare verification prompting users to run a terminal command (ClickFix)

CRITICAL IDS malware alerts for EtherHiding exfiltration and ClickFix domain

Threat-intel match identifying the primary domain as a malware loader

Blockchain RPC/wallet-related network activity on a 1-day-old unrelated domain

External resource loaded from a host flagged malicious by multiple feeds

Domain age information unavailable

Details

Page Title

TerraMare – Orgulhosamente Português

Scan Type

public

Favicon Hash

MMH3: 481099552

MD5: 3b2d61fbb15f6dfaedda649e57d4a37e

Domain Name Analysis

Domain 'terramare.pt' uses the Portuguese country-code top-level domain (.pt) with no subdomain. Count 9 characters in 'terramare' with 4 vowels and five consonants. Segmentation suggests two words: terram, are. Median word length comes out to 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

17.80s

Total Load Time

1.2 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:46%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,481 chars

Detector Agreement:75%

Language mismatch: Declared as en-US but detected as pt

Website Classification

Primary Category

government public service84% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

84%

documentation technical

82%

blog personal website

81%

technology software

80%

cryptocurrency blockchain

78%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	81.88.52.92	Italy	AS39729Register S.p.A.
3	142.251.20.95Google · CDN	United States	AS15169Google LLC
3	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	62.193.192.150	Belgium	AS34762Combell NV
3	142.250.154.94Google · CDN	United States	AS15169Google LLC
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
3	142.251.110.95Google · CDN	United States	AS15169Google LLC
3	142.251.110.94Google · CDN	United States	AS15169Google LLC
38	12	-	-