Security Report: www.tenutadelperugino.it - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/3f3494e2-1e28-4ea3-b880-ab76978352b0 Domain and IP registration (RDAP)/api/v1/rdap/3f3494e2-1e28-4ea3-b880-ab76978352b0How often this domain was scanned/api/v1/domain/stats/tenutadelperugino.it Scan history for this domain/api/v1/domain/history/tenutadelperugino.it?limit=15

This website contacted 20 IPs in 4 countries across 19 domains to perform 152 HTTP transactions. The main domain is tenutadelperugino.it and was registered 17 years ago.

Submitted URL: https://www.tenutadelperugino.it/

AI Security Verdict

High Risk

Confidence: 75%

Risk Score

Established 17-year-old Italian agriturismo whose site appears COMPROMISED: CRITICAL IDS alerts for ClickFix/EtherHiding malware, blockchain RPC calls and a malware-flagged resource. No forms involved; do not browse until cleaned.

Risk Factors (5)

CRITICAL IDS signatures for ClickFix / EtherHiding malware delivery and exfiltration on this page's network traffic

Injected script contacting blockchain RPC/contract infrastructure (EtherHiding technique) to fetch malware

Primary domain flagged 'iclickfix (malware)' by threat intelligence (single-source, unverified)

Page loads a resource from browseid.codes, a host reported malicious by two feeds

Compromise indicator: a 17-year-old small-business site suddenly serving blockchain/ClickFix infrastructure

Domain age information unavailable

Details

Page Title

Tenuta del Perugino – Agriturismo

Scan Type

public

Favicon Hash

MMH3: -424682148

MD5: 71a1602131f795b752ac06f718e55660

Domain Name Analysis

Within the Italian country-code top-level domain (.it), 'www.tenutadelperugino.it' is registered with subdomain 'www'. The second-level label 'tenutadelperugino' is 17 characters long holding eight vowels versus nine consonants. Tokenizing the label suggests 4 words: ten, uta, del, perugino. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.41s

Total Load Time

4.2 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:4,272 chars

Detector Agreement:100%

Website Classification

Primary Category

news/blog40% confidence

Type: spa

Method: structural

All Detected Categories

news/blog

40%

Detected Features

OG: article

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
19	89.46.108.59	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
7	192.178.183.97Google · CDN	United States	AS15169Google LLC
7	142.251.127.139Google · CDN	United States	AS15169Google LLC
7	146.185.171.14	Amsterdam, North Holland, Netherlands	AS14061DigitalOcean, LLC
7	151.101.1.229Fastly · CDN	United States	AS54113Fastly, Inc.
7	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
7	142.251.14.94Google · CDN	United States	AS15169Google LLC
7	142.251.14.95Google · CDN	United States	AS15169Google LLC
7	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
152	20	-	-