Security Report: fondazioneoav.it - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0ca86489-8488-48ad-873e-314278cd7651 Domain and IP registration (RDAP)/api/v1/rdap/0ca86489-8488-48ad-873e-314278cd7651How often this domain was scanned/api/v1/domain/stats/fondazioneoav.it Scan history for this domain/api/v1/domain/history/fondazioneoav.it?limit=15

This website contacted 5 IPs in 3 countries across 8 domains to perform 1704 HTTP transactions. The main domain is fondazioneoav.it and was registered 10 years ago.

Submitted URL: https://fondazioneoav.it

AI Security Verdict

High Risk

Confidence: 85%

Risk Score

Legitimate Italian lawyers' foundation site apparently compromised to serve a ClickFix/AMOS loader and EtherHiding payload (critical IDS alerts, malicious third-party domains). Avoid interaction.

Risk Factors (4)

CRITICAL IDS malware alerts for AMOS ClickFix loader and EtherHiding exfiltration

Loads third-party domains flagged as malicious clearfake exploit kit / IClickFix

Blockchain RPC and Ethereum contract activity consistent with EtherHiding malware delivery

Likely compromised legitimate site used as malware distribution vector

Domain age information unavailable

Details

Page Title

Fondazione OAV – Fondazione dell'Avvocatura Veliterna – Ordine Avvocati Velletriother network

Scan Type

public

Favicon Hash

MMH3: -172807900

MD5: 6f487b5f40fd4cdf5c16a16364ae9aa3

Domain Name Analysis

The domain name 'fondazioneoav.it' uses the Italian country-code top-level domain (.it) while skipping any subdomain. The registrable portion 'fondazioneoav' spans 13 characters split between seven vowels and six consonants. Tokenizing the label suggests 4 words: fond, azione, o, av. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

N/A

Total Load Time

82.2 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:89,304 chars

Detector Agreement:100%

Website Classification

Primary Category

entertainment media60% confidence

Type: spa

Method: ml+structural

All Detected Categories

entertainment media

60%

education learning

37%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
344	89.46.105.43	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
340	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
340	142.251.14.95Google · CDN	United States	AS15169Google LLC
340	171.22.131.23	Cyprus	AS203273NetCrafters OU
340	151.11.48.28	Florence, Tuscany, Italy	AS24994genesys informatica srl
0	5	-	-