ScanMalware.com

Security Scan Report: carmeluandgio.com

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/965e9950-8290-48a9-b900-69b983f00c0eDomain and IP registration (RDAP)/api/v1/rdap/965e9950-8290-48a9-b900-69b983f00c0eHow often this domain was scanned/api/v1/domain/stats/carmeluandgio.comScan history for this domain/api/v1/domain/history/carmeluandgio.com?limit=15
This website contacted 23 IPs in 3 countries across 22 domains to perform 181 HTTP transactions. The main domain is carmeluandgio.com and was registered 5 years ago.

Submitted URL: https://carmeluandgio.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate-looking Venezuelan carpentry supplier whose pages are compromised: an obfuscated EtherHiding/ClickFix loader, flagged exploit-kit host, multi-feed malware IoCs and a critical IDS alert mean visitors may be infected.

Risk Factors (5)
Compromised page serves obfuscated EtherHiding/ClickFix loader that fetches an encrypted stage from an Ethereum Sepolia smart contract
Multi-feed content-malware indicator on the scanned domain itself
Loaded third-party resource from an exploit-kit-flagged domain (zvh3.com)
Critical network IDS malware alert for EtherHiding exfiltration
Connections to blockchain RPC endpoints hidden inside obfuscated script
Domain age information unavailable

Details

Page Title

carmeluandgio.com – carmeluandgio.com

Scan Type

public

Domain Name Analysis

The domain 'carmeluandgio.com' uses the commercial generic top-level domain (.com) and has no subdomain. Count 13 characters in 'carmeluandgio' split between 6 vowels and 7 consonants. Breaking it apart gives 5 words: carmel, u, and, g, io. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://carmeluandgio.com

Page Load Overview

6.58s
Total Load Time
3.9 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:14,383 chars
Detector Agreement:50%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Search
OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
27192.254.227.201Phoenix, Arizona, United States
AS31898Oracle Corporation
7142.251.14.95Google · CDNUnited States
AS15169Google LLC
7192.0.77.37San Francisco, California, United States
AS2635Automattic, Inc
7104.18.7.168Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
7142.251.20.97Google · CDNUnited States
AS15169Google LLC
7216.239.32.36Google · CDNUnited States
AS15169Google LLC
734.147.177.40Google · CDNCity of London, England, United Kingdom
AS396982Google LLC
7146.75.121.35Fastly · CDNFrankfurt am Main, Hesse, Germany
AS54113Fastly, Inc.
7142.251.14.154Google · CDNUnited States
AS15169Google LLC
18123--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T162B41BD17ED4D43E921F26CE7079AE4C75831292DE0914B5B2BAD29893E3FF136A500D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:n2+SDU3Q/Oip1eVktJ9HUJRH1IcAnNI2juVOjzIEDGb0JNI2x2gShzIEVGUc/K7b:2+SDUjMyAnNNCVOjzrqb0JNN4gShzrMK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:534824:Ch5ICjBwocmotBMEIKEmEwIMQkGkiKALBAiBtJJUIDxIWJQkoT4KCggwzAgNahEWMQKhZKopCBD8gByAgANSWmmHCUBGTCI8

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff4f6f6f6f630000
Perceptual Hash:a1b05eed9652e5c2
Difference Hash:58dbdfded3d3d9d8
Wavelet Hash:2f4f6f6f6f630000
Color Hash:#96d22d

Other Hashes

Crop Resistant:58dbdfded3d3d9d8,703832b232b2b2b2,4121c9c9c9211b18,dfdedfdbd3dbd8dc,459593a4ac931545

Scan History

Scan history not available

Unable to load historical scan data