Security Scan Report: sslazio.world

Site favicon
Submitted: Sep 17, 2026, 3:47:33 AMCompleted: Sep 17, 2026, 3:48:45 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Legitimate-looking Lazio fan blog whose primary domain matches a ClearFake malware indicator and shows critical EtherHiding exfiltration IDS alerts; likely compromised. Avoid visiting.

Risk Factors
Confirmed ClearFake malware indicator on the primary domain
Critical EtherHiding exfiltration network activity
Page loads a third-party resource flagged as ClearFake malware by multiple feeds
Deceptive browser-check interstitial consistent with ClearFake/clipboard-injection delivery
Domain is unranked in Cisco Umbrella and only 205 days old
Domain age information unavailable

Details

Page Title

Home - S.S. Lazio World

Scan Type

public

Domain Name Analysis

The domain 'sslazio.world' uses the .world top-level domain. Its registrable label 'sslazio' stretches across 7 characters containing three vowels alongside 4 consonants. Splitting it apart reveals 3 words: s, s, lazio. Median word length is 1 character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sslazio.world

Page Load Overview

5.33s
Total Load Time
77 KB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:13,962 chars
Detector Agreement:75%

Website Classification

Primary Category

documentation technical58% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
58%
technology software
41%
adult content
32%
cryptocurrency blockchain
29%
phishing scam
29%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
192.113.23.196Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
192.113.23.228Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
1142.251.14.95Google · CDNUnited States
AS15169Google LLC
192.113.16.137Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
1142.251.14.94Google · CDNUnited States
AS15169Google LLC
66--

Detected Technologies7

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DB4185332614203DA27346D278E5B79C774AC517630194B4ACF226CC92DDB9545F97CE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:Tm0ZiXTNaNOZVWmjEuZBvVRRcUl/O03CttJwDBRZAdD:TmImZfjjhdO0yttqDbuZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:2319:AAAAAAAQCAQQAEBAAAAiAAAAEEgABDAAICCAEUMAAECIAABAiIEAAQAAQIABACAAQQBAwAAQAQBAAAgAIAAIIAAAgAEAQAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffe7c3ffffff
Perceptual Hash:b38ccc3333cccc33
Difference Hash:0000000c0c000000
Wavelet Hash:f0f0f8e0033f0f0f
Color Hash:#1f9388

Other Hashes

Crop Resistant:0000000c0c000000

Scan History

Scan history not available

Unable to load historical scan data