Security Scan Report: filandoarte.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 4 domains to perform 7 HTTP transactions. The main domain is filandoarte.com and was registered 4 years 4 months ago.

Submitted URL: https://filandoarte.com

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Compromised site serving a Windows ClickFix kit: fake Cloudflare 'Human Verification' overlay telling users to paste commands into Terminal, backed by critical YARA hits and EtherHiding via a Polygon contract. Do not interact.

Risk Factors (6)
Injected ClickFix fake-verification overlay soliciting keyboard/terminal execution (Win+X → Terminal → Ctrl+V → Enter)
Critical YARA matches for ClickFix overlay and packed blockchain contract loader
EtherHiding: malicious payload address resolved from a Polygon smart contract
Obfuscated third-party script from cloud-browse.codes (exploit-kit flagged, unranked host)
Threat-intel matches on both the primary domain and loaded resources; CRITICAL IDS malware alerts
Impersonation of Cloudflare's security/interstitial branding
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

The domain name 'filandoarte.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'filandoarte' is 11 characters long containing five vowels alongside 6 consonants. It segments into three words: fi, lando, arte. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://filandoarte.com

Page Load Overview

0.94s
Total Load Time
47 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:50%
Script:Latin
Direction:ltr

Detection Details

Text Length:649 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain46% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
46%
technology software
44%
documentation technical
27%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3217.160.0.190Germany
AS8560IONOS SE
1152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
1172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
1104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
75--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19603C8675394226EA35B8EDF5214231B307DD0C6ED23079CE5E16B23C66FE963971238

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:efvVOVha/r1LrHO+o163R3oKOsQD3oKOoU3oKOHI:efvVqha/rVO+o163xoumI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:41033:ZYIYYBkoxWAAaFGaIIhANASBJAgEQYoFEuVKaLYFZBLgpIABIAIDLYJhTgSYcOzcEA8SogBCkQoFO8gy0IrBABCiFIE4gUAY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:cfcfc3c3ffffffff
Perceptual Hash:b03193c7c6ccccce
Difference Hash:1818163600000008
Wavelet Hash:3f070303f0f0ff00
Color Hash:#b7bf40

Other Hashes

Crop Resistant:1818163600000008

Scan History

Scan history not available

Unable to load historical scan data