Security Report: pizzeriadilucca.nl - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/35d11b06-f9c8-4d5a-9ce8-de64f972887e Domain and IP registration (RDAP)/api/v1/rdap/35d11b06-f9c8-4d5a-9ce8-de64f972887e Certificate Transparency/api/v1/ct/pizzeriadilucca.nl How often this domain was scanned/api/v1/domain/stats/pizzeriadilucca.nl Scan history for this domain/api/v1/domain/history/pizzeriadilucca.nl?limit=15

This website contacted 13 IPs in 3 countries across 14 domains to perform 36 HTTP transactions. The main domain is pizzeriadilucca.nl and was registered 18 years ago.

Submitted URL: https://pizzeriadilucca.nl

Effective URL:

https://www.pizzeriadilucca.nl/

Redirected

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Long-standing Dutch pizzeria site appears compromised: CRITICAL EtherHiding malware IDS alerts, blockchain RPC C2 connections, and a 3-feed exploit-kit domain loaded by the page indicate injected malware delivery.

Risk Factors (5)

CRITICAL IDS malware alert (EtherHiding exfiltration) on a benign-looking restaurant page

Blockchain RPC connections combined with dynamic code generation — EtherHiding/dropper pattern

Page loads a third-party domain corroborated as an exploit kit by three feeds

Inline scripts performing encode/decode plus Function() constructor code generation

Legitimate pizzeria content likely indicates a compromised website being abused to serve/hide malware

Domain age information unavailable

Details

Page Title

Pizzeria di Lucca | Restaurant in Annen

Scan Type

public

Favicon Hash

MMH3: 1152685774

MD5: 2f9cb476d73c1783c4cd8365d3412d8f

Domain Name Analysis

The domain name 'pizzeriadilucca.nl' uses the Dutch country-code top-level domain (.nl). The registrable portion 'pizzeriadilucca' spans 15 characters containing 7 vowels alongside 8 consonants. Splitting it apart reveals 3 words: pizzeria, di, lucca. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

22.91s

Total Load Time

1.7 MB

Total Size

Language Analysis

Primary Language

🇳🇱Dutch

Code: nl

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:nl-NL

Text Length:818 chars

Detector Agreement:67%

Website Classification

Primary Category

government public service36% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

government public service

36%

adult content

34%

healthcare medical

31%

education learning

31%

travel tourism

28%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	84.22.96.117	Woerden, Utrecht, Netherlands	AS196752Tilaa B.V.
2	142.251.127.97Google · CDN	United States	AS15169Google LLC
2	142.250.154.95Google · CDN	United States	AS15169Google LLC
2	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	216.239.38.178Google · CDN	United States	AS15169Google LLC
2	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
2	104.18.11.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.14.94Google · CDN	United States	AS15169Google LLC
36	13	-	-