Security Report: olmo-martin.org - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d213b67f-32ca-4774-85c3-f08b2b41b8a8 Domain and IP registration (RDAP)/api/v1/rdap/d213b67f-32ca-4774-85c3-f08b2b41b8a8 Certificate Transparency/api/v1/ct/olmo-martin.org How often this domain was scanned/api/v1/domain/stats/olmo-martin.org Scan history for this domain/api/v1/domain/history/olmo-martin.org?limit=15

This website contacted 9 IPs in 3 countries across 8 domains to perform 95 HTTP transactions. The main domain is olmo-martin.org and was registered 2 months ago.

Submitted URL: https://olmo-martin.org

Effective URL:

https://www.olmo-martin.org/

Redirected

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Legitimate German family-business site appears compromised: CRITICAL EtherHiding malware IDS alert, ClearFake exploit-kit domains (seconurl.com, rebrato.com, zvh3.com) and an Ethereum C2 endpoint are loaded. Avoid the site.

Risk Factors (5)

CRITICAL network IDS malware/exfiltration alert on the page

Page loads third-party resources flagged by multiple feeds as ClearFake exploit kit and malware

EtherHiding blockchain C2 technique observed (0xrpc.io Ethereum RPC endpoint)

Primary domain reported in threat intel as a malware loader

Compromised legitimate website abusing visitor trust to serve drive-by malware

Domain age information unavailable

Details

Page Title

Unternehmerfamilie – Familienunternehmen

Scan Type

public

Domain Name Analysis

The domain name 'olmo-martin.org' uses the non-profit oriented generic top-level domain (.org). The registrable portion 'olmo-martin' spans 11 characters containing four vowels alongside six consonants; bonus characters include one hyphen. Tokenizing the label suggests 2 words: olmo, martin. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.12s

Total Load Time

2.5 MB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:1,986 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business100% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

100%

government public service

25%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	217.91.141.218	Dortmund, North Rhine-Westphalia, Germany	AS3320Deutsche Telekom AG
10	142.251.14.95Google · CDN	United States	AS15169Google LLC
10	192.178.183.94Google · CDN	United States	AS15169Google LLC
10	172.67.221.251Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
10	142.251.20.95Google · CDN	United States	AS15169Google LLC
10	142.251.14.94Google · CDN	United States	AS15169Google LLC
10	146.19.24.104	Poland	AS201814MEVSPACE sp. z o.o.
10	172.67.175.246Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
95	9	-	-