Security Scan: Homepage

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1f18f1fe-8e80-4e07-a152-093521e2e17b Domain and IP registration (RDAP)/api/v1/rdap/1f18f1fe-8e80-4e07-a152-093521e2e17bHow often this domain was scanned/api/v1/domain/stats/antonicelliformazione.it Scan history for this domain/api/v1/domain/history/antonicelliformazione.it?limit=15

This website contacted 19 IPs in 4 countries across 16 domains to perform 75 HTTP transactions. The main domain is antonicelliformazione.it and was registered 5 years ago.

Submitted URL: https://antonicelliformazione.it

Effective URL:

https://www.antonicelliformazione.it/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Legitimate Italian training firm's site is compromised: an injected ClickFix 'Human Verification' overlay and EtherHiding blockchain loader push visitors to run malware via Terminal. Avoid and report.

Risk Factors (6)

Injected ClickFix Windows 'Human Verification' overlay kit (Terminal/Run paste lure)

EtherHiding loader fetching payload host from a Polygon smart contract

Multiple CRITICAL YARA matches and CRITICAL Suricata malware/exploit-kit alerts

Threat-intel 'clearfake' (malware) match on the primary domain corroborated by two feeds

Hidden threat-feed script hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co) only visible after decoding obfuscated JavaScript

Injected casino/gambling keyword spam unrelated to the site's training content

Domain age information unavailable

Details

Page Title

Homepage

Scan Type

public

Favicon Hash

MMH3: 1901361321

MD5: ea180ae499a1d302615aa2ed142aa006

Domain Name Analysis

The domain 'antonicelliformazione.it' uses the Italian country-code top-level domain (.it) while skipping any subdomain. Its registrable label 'antonicelliformazione' stretches across 21 characters with ten vowels and eleven consonants. Tokenizing the label suggests four words: antoni, celli, form, azione. Average segment length settles at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.07s

Total Load Time

9.4 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:15,498 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence

Type: spa

Method: structural

All Detected Categories

corporate

70%

news/blog

40%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
21	89.46.106.39	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
3	185.111.111.154	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
3	142.251.14.95Google · CDN	United States	AS15169Google LLC
3	172.67.142.245Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	79.127.204.113Datacamp · CDN	Prague, Prague, Czech Republic	AS60068Datacamp Limited
3	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
3	142.251.20.94Google · CDN	United States	AS15169Google LLC
3	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
75	19	-	-