Security Report: www.gabyfox.it - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1ee5a713-692d-4e50-806f-75275f127b54 Domain and IP registration (RDAP)/api/v1/rdap/1ee5a713-692d-4e50-806f-75275f127b54How often this domain was scanned/api/v1/domain/stats/gabyfox.it Scan history for this domain/api/v1/domain/history/gabyfox.it?limit=15

This website contacted 14 IPs in 3 countries across 8 domains to perform 131 HTTP transactions. The main domain is gabyfox.it and was registered 7 years ago.

Submitted URL: https://www.gabyfox.it

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Legitimate-looking sportswear site whose pages carry an obfuscated EtherHiding/ClearFake-style script resolving a next stage from a blockchain contract and hiding threat-feed hosts; treat as compromised malware distribution, not a phishing page.

Risk Factors (4)

Threat-intel report of ClearFake on the primary domain

Blockchain-based (EtherHiding) payload address resolution in an obfuscated script

Obfuscated script contacting hosts flagged as known attacker and Vidar malware infrastructure

Encoded/decoding JavaScript functions on a page with no functional need for them

Domain age information unavailable

Details

Page Title

Gabyfox – Veste i campioni

Scan Type

public

Favicon Hash

MMH3: -1862034776

MD5: 77a29bc477adb91c0cfc8becfdfa01ed

Domain Name Analysis

The domain name 'www.gabyfox.it' uses the Italian country-code top-level domain (.it) and includes subdomain 'www'. The second-level label 'gabyfox' is 7 characters long with 2 vowels and five consonants. Splitting it apart reveals 2 words: gaby, fox. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

26.00s

Total Load Time

21.1 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:1,196 chars

Detector Agreement:50%

Website Classification

Primary Category

social media network42% confidence

Type: spa

Method: ml+structural

All Detected Categories

social media network

42%

phishing/scam

20%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	89.46.109.37	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
9	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	192.178.183.95Google · CDN	United States	AS15169Google LLC
9	18.173.205.120Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
9	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
9	3.66.254.144Aws · CLOUD	Frankfurt am Main, Hesse, Germany	AS16509Amazon.com, Inc.
9	142.251.110.94Google · CDN	United States	AS15169Google LLC
9	185.111.111.154	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
9	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
9	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
131	14	-	-