Security Scan Report: strappete.it

Redirected to:
https://www.strappete.it/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 3 countries across 8 domains to perform 47 HTTP transactions. The main domain is strappete.it and was registered 5 years ago.

Submitted URL: https://strappete.it

Effective URL:
https://www.strappete.it/
Redirected

AI Security Verdict

High Risk

Confidence: 93%

9
Risk Score

Legitimate Italian olive-oil farm whose site is compromised and serving an injected ClickFix/EtherHiding malware loader that hijacks Windows visitors via fake 'Human Verification' prompts — do not interact.

Risk Factors (4)
Analyst-vetted ClickFix/Polygon smart-contract overlay loader injected into the page (EtherHiding)
Multiple CRITICAL YARA and CRITICAL IDS malware alerts including exfiltration signature
Page loads obfuscated third-party script from cloud-browse.codes, a host flagged as a malicious exploit kit by three feeds
Page scripts contact blockchain RPC endpoints solely to retrieve a hidden malicious overlay host
Domain age information unavailable

Details

Page Title

Homepage - Strappete oil extra virgin

Scan Type

public

Domain Name Analysis

The domain name 'strappete.it' uses the Italian country-code top-level domain (.it). The core label 'strappete' covers 9 characters split between three vowels and six consonants. Tokenizing the label suggests two words: strap, pete. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://strappete.it

Page Load Overview

1.61s
Total Load Time
1.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,641 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1289.46.105.32Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
5142.251.110.94Google · CDNUnited States
AS15169Google LLC
5188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
535.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
5178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
5188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
478--

Detected Technologies16

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T185A3E73313540A3FA78A05DDA16DB20B62E0D527EF29121CF7BA8DFCAB6C9D21535316

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:PJtNAN0AgAjYAJIDiGu3iZ7+NMQHTOlvm9vvFe5jmovKVn3uRS:+3V5e5K

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:104445:EIgMYEe1hkIGDTyiAAQGIgJAYeoKKIlKIAtAQhQAbA3AkiQogAHmNkQCIiUyNJPASLiCYgIUsAAAG8CWoymNDJ5IQgGADEQE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:5010a1b9215b5a84
Perceptual Hash:c862548973dd3373
Difference Hash:c5a1296949b3b20d
Wavelet Hash:5050a1b1bd5b5ba7
Color Hash:#bfbb40

Scan History

Scan history not available

Unable to load historical scan data