Security Report: f3martelinho.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/fbc24042-689d-402e-adc9-b03fbf897625 Domain and IP registration (RDAP)/api/v1/rdap/fbc24042-689d-402e-adc9-b03fbf897625 Certificate Transparency/api/v1/ct/f3martelinho.com How often this domain was scanned/api/v1/domain/stats/f3martelinho.com Scan history for this domain/api/v1/domain/history/f3martelinho.com?limit=15

This website contacted 19 IPs in 2 countries across 14 domains to perform 81 HTTP transactions. The main domain is f3martelinho.com and was registered 21 years ago.

Submitted URL: https://f3martelinho.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Trusted auto-repair site appears compromised: it serves a fake CAPTCHA/ClickFix that tells users to paste PowerShell commands, alongside EtherHiding blockchain malware exfiltration alerts.

Risk Factors (5)

Critical EtherHiding malware exfiltration alerts on the page

Blockchain RPC connections consistent with EtherHiding command-and-control/exfiltration

Fake reCAPTCHA verification directing users to run hidden PowerShell commands

Primary domain flagged as a malware loader in threat intelligence

Legitimate 11-year-old business domain appears compromised and weaponized

Domain age information unavailable

Details

Page Title

F3 Martelinho – Pintura e Funilaria Campinas

Scan Type

public

Favicon Hash

MMH3: -1069655625

MD5: fdd84d54cfcab6558f4bdcf8d044018e

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'f3martelinho.com' is registered while skipping any subdomain. Its registrable label 'f3martelinho' stretches across 12 characters with 4 vowels and 7 consonants, along with 1 digit. Splitting it apart reveals five words: f, 3, martel, in, ho. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

18.45s

Total Load Time

4.3 MB

Total Size

Language Analysis

Primary Language

🇵🇹Portuguese

Code: pt

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:pt-BR

Text Length:2,144 chars

Detector Agreement:50%

Website Classification

Primary Category

documentation technical92% confidence

Type: static

Method: ml+structural

All Detected Categories

documentation technical

92%

technology software

87%

government public service

77%

adult content

71%

phishing scam

61%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
9	142.251.14.95Google · CDN	United States	AS15169Google LLC
4	186.234.81.13	Brazil	AS7162Universo Online S.A.
4	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
4	142.251.13.95Google · CDN	United States	AS15169Google LLC
4	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	192.178.183.94Google · CDN	United States	AS15169Google LLC
4	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
4	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	34.111.175.102Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
81	19	-	-