Security Scan: Grivetti Restauri srl

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/161613c5-b5d0-4f92-8a39-438f8a021cd5 Domain and IP registration (RDAP)/api/v1/rdap/161613c5-b5d0-4f92-8a39-438f8a021cd5How often this domain was scanned/api/v1/domain/stats/grivettirestauri.it Scan history for this domain/api/v1/domain/history/grivettirestauri.it?limit=15

This website contacted 5 IPs in 3 countries across 6 domains to perform 54 HTTP transactions. The main domain is grivettirestauri.it and was registered 2 years 6 months ago.

Submitted URL: https://grivettirestauri.it

Effective URL:

https://www.grivettirestauri.it/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate Italian construction firm whose site is compromised with a ClickFix fake 'Human Verification' overlay and blockchain (EtherHiding) loader; do not follow the paste-into-Terminal instructions.

Risk Factors (5)

Injected fake Cloudflare-style 'Human Verification' ClickFix overlay instructing users to paste and execute commands in Windows Terminal

Blockchain-based (EtherHiding) loader fetching its next stage from a smart contract, evading static blocking

Obfuscated third-party script from unranked host jscdncloude.beer serving malicious code

Critical IDS alerts for EtherHiding exfiltration and exploit-kit check-ins

Legitimate business site showing clear signs of compromise — no forms, so the risk is malware, not credential harvesting

Domain age information unavailable

Details

Page Title

Grivetti Restauri srl

Scan Type

public

Favicon Hash

MMH3: 1790655302

MD5: 137232131aab1865d5dd8a8c08cf052d

Domain Name Analysis

Domain 'grivettirestauri.it' uses the Italian country-code top-level domain (.it). The second-level label 'grivettirestauri' is 16 characters long containing seven vowels alongside 9 consonants. Word splitting yields 4 words: g, rivet, tires, tauri. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.94s

Total Load Time

2.0 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:2,900 chars

Detector Agreement:80%

Website Classification

Primary Category

real estate property100% confidence

Type: spa

Method: ml+structural

All Detected Categories

real estate property

100%

corporate business

98%

documentation technical

35%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	89.46.108.19	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
10	142.251.20.95Google · CDN	United States	AS15169Google LLC
10	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
10	142.251.14.94Google · CDN	United States	AS15169Google LLC
10	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
54	5	-	-