Security Report: 3ob.fr - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ac18bb27-1638-4bbf-b40e-5676b912b5dc Domain and IP registration (RDAP)/api/v1/rdap/ac18bb27-1638-4bbf-b40e-5676b912b5dc Certificate Transparency/api/v1/ct/3ob.fr How often this domain was scanned/api/v1/domain/stats/3ob.fr Scan history for this domain/api/v1/domain/history/3ob.fr?limit=15

This website contacted 7 IPs in 3 countries across 8 domains to perform 116 HTTP transactions. The main domain is 3ob.fr and was registered 5 years ago.

Submitted URL: https://3ob.fr

Effective URL:

https://www.3ob.fr/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Compromised legitimate site injecting a ClickFix 'Human Verification' overlay with an EtherHiding blockchain loader; kit roster, YARA and CRITICAL IDS alerts confirm active malware distribution. Do not visit or interact.

Risk Factors (6)

Injected ClickFix malware kit delivering a fake 'Human Verification' overlay that instructs Windows users to run PowerShell/Terminal commands

EtherHiding / blockchain-contract-hosted second stage retrieved via Tenderly, Ankr, drpc, blastapi and 1rpc RPC endpoints

Obfuscated script hides threat-feed C2 hosts until decoded

Multiple CRITICAL IDS alerts for ClickFix and EtherHiding exfiltration

Malware threat-intel match on the primary domain corroborated by two independent feeds

Injected third-party SEO-spam content (illegal casino, adult, betting pages) on a compromised business website

Domain age information unavailable

Details

Page Title

Accueil - 3OB

Scan Type

public

Favicon Hash

MMH3: -2125153908

MD5: a60a7929e70e2cf5b555e1027a9e8311

Domain Name Analysis

The domain '3ob.fr' uses the French country-code top-level domain (.fr) and has no subdomain. The registrable portion '3ob' spans 3 characters with one vowel and 1 consonant, plus 1 digit. Word splitting yields 2 words: 3, ob. The median word length lands at 1.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

24.21s

Total Load Time

7.1 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:5,089 chars

Detector Agreement:67%

Website Classification

Primary Category

corporate35% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate

35%

government public service

34%

documentation technical

28%

corporate business

27%

real estate property

26%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	109.234.164.80	France	AS50474O2switch SAS
16	142.251.14.95Google · CDN	United States	AS15169Google LLC
16	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
16	142.251.110.94Google · CDN	United States	AS15169Google LLC
16	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
16	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
16	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
116	7	-	-