Security Scan Report: nextre.it

Redirected to:
https://www.nextre.it/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 44 IPs in 3 countries across 33 domains to perform 167 HTTP transactions. The main domain is nextre.it and was registered 21 years ago.

Submitted URL: https://nextre.it

Effective URL:
https://www.nextre.it/
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Established Italian IT firm's site, but scanner IDS saw CRITICAL EtherHiding malware-exfil traffic, the primary domain carries a malware threat-intel flag, and it loads a flagged third-party host — likely compromised. Avoid.

Risk Factors (4)
CRITICAL IDS malware signature (EtherHiding exfil) observed in page traffic
Primary domain carries a malware-typed threat-intel indicator (clearfake / unknown loader)
Malicious third-party host (checkyoubrowse.codes) and IP (178.16.52.101) loaded as sub-resources
Blockchain RPC / Ethereum contract interactions on an IT-consulting content page
Domain age information unavailable

Details

Page Title

Nextre Srl - IT & Digital Consulting

Scan Type

public

Domain Name Analysis

You're looking at domain 'nextre.it' on the Italian country-code top-level domain (.it) with no subdomain. The core label 'nextre' covers 6 characters split between two vowels and four consonants. Word splitting yields 2 words: next, re. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://nextre.it

Page Load Overview

10.71s
Total Load Time
5.6 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:8,024 chars
Detector Agreement:80%

Website Classification

Primary Category

technology software42% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
42%
corporate
35%
news/blog
20%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
38161.35.20.206Frankfurt am Main, Hesse, Germany
AS14061DigitalOcean, LLC
3104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
33.5.78.2Aws · CLOUDBoardman, Oregon, United States
AS16509Amazon.com, Inc.
3104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
379.127.204.113Datacamp · CDNPrague, Prague, Czech Republic
AS60068Datacamp Limited
345.133.44.4Philadelphia, Pennsylvania, United States
AS39572DataWeb Global Group B.V.
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3104.16.141.209Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
16744--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B9440A636BC0613651A646C46575B22DE6A7D043D70019B8F3AEE7FD6B88BC2343E327

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:LLD+qRzYB+oAuOi5BbUWggggVQVAOHbgtqELMcDHm5pKOA+Wljh1rGJB4qz2oaGY:juOi55UWggggVQaQRquEAD+Llhz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:275370:YgIAaCBoISIAgiYUhIEFh0QIWoCOMikjgCIXGoQIQZGwirISWMBiGIRFIu8FBwUEgiTIERI4ikh2EUFA2FJEAQxNvAADGg6R

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffffff9fb000000
Perceptual Hash:ebbd1684ed08b989
Difference Hash:668f3333636b6845
Wavelet Hash:fffff9b1f9000000
Color Hash:#77862d

Scan History

Scan history not available

Unable to load historical scan data