ScanMalware.com

Security Scan Report: www.tais-costruzioni.it

Redirected to:
https://news.okezone.com/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/094a8a64-d930-4b28-9bc4-b3b4bbd1af72Domain and IP registration (RDAP)/api/v1/rdap/094a8a64-d930-4b28-9bc4-b3b4bbd1af72How often this domain was scanned/api/v1/domain/stats/tais-costruzioni.itScan history for this domain/api/v1/domain/history/tais-costruzioni.it?limit=15
This website contacted 65 IPs in 6 countries across 48 domains to perform 740 HTTP transactions. The main domain is tais-costruzioni.it and was registered 19 years ago.

Submitted URL: http://www.tais-costruzioni.it/

Effective URL:
https://news.okezone.com/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 75%

5
Risk Score

The entry domain tais-costruzioni.it is flagged as a malware loader by two independent threat feeds and redirects across domains to news.okezone.com. The rendered Okezone article page is clean (no forms, no malware JS), but the entry host is a confirmed malware IoC.

Risk Factors (2)
Content-malware threat-intelligence match (unknown loader / unknown malware) against the scanned entry domain, corroborated by two independent feeds
Cross-domain redirect from an unrelated Italian domain to an Indonesian news site, consistent with a compromised or repurposed redirector/loader host
Safety Factors (6)
Final destination news.okezone.com is an established, ranked news site reached via redirect, not a lookalike
Zero forms on the rendered page: 0 password, 0 disguised-password and 0 payment fields, so no credential or payment harvesting
No JavaScript malware (YARA), no high-precision native-YARA hits, and no network IDS alerts
Page is marked og:type=article with byline-style news metadata, i.e. reporting content rather than an impersonation page
No credential exfiltration detected; cross-origin requests are ordinary analytics/ad-tech traffic from ranked hosts
Established domain (7263 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Berita nasional dan internasional hari ini - Okezone News

Scan Type

public

Domain Name Analysis

Domain 'www.tais-costruzioni.it' uses the Italian country-code top-level domain (.it) with subdomain 'www'. The registrable portion 'tais-costruzioni' spans 16 characters containing seven vowels alongside 8 consonants; bonus characters include 1 hyphen. Splitting it apart reveals six words: ta, is, cost, ru, zion, i. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://www.tais-costruzioni.it/

Page Load Overview

4.56s
Total Load Time
26.9 MB
Total Size

Language Analysis

Primary Language

🇮🇩Indonesian
Code: id
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:id-ID
Text Length:72,554 chars
Detector Agreement:60%

Website Classification

Primary Category

government public service96% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
96%
news media journalism
96%
technology software
95%
documentation technical
94%
blog personal website
94%

Detected Features

Search
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
36104.18.30.212Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1189.46.108.44Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
11192.178.183.97Google · CDNUnited States
AS15169Google LLC
11142.251.110.100Google · CDNUnited States
AS15169Google LLC
11104.16.128.65Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.18.31.212Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.18.11.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11192.178.183.95Google · CDNUnited States
AS15169Google LLC
1120.250.198.32Azure · CLOUDZurich, Zurich, Switzerland
AS8075Microsoft Corporation
74065--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EDF4C732F880283F9B7B45C4A649D70A72D6A30FE4D94450F5DE07684BE9EB8B41F297

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:c1M5hQNWvkrqZ7uRg9VFWdVUw3oI5RNBroLV3JGNT8EvKa7ibbgL+ba:WM5hQWvaVoL1J7HICa

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:771760:TBI7UR4IhqT5BAhMIkUikzIBBkyBQjk5kQgeRhAgFANNgAQxIqJBJKN4AGGBDqQoYBMUgARFrZhEZCQ0kMJJYwkF2EGAZS5h

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018181818181800
Perceptual Hash:9c99636731189ccf
Difference Hash:0e3332323233330e
Wavelet Hash:03199d9d9d9d9880
Color Hash:#e06c6c

Other Hashes

Crop Resistant:8eaa9ea6a2aa3786,0e3332323233330e

Scan History

Scan history not available

Unable to load historical scan data