Security Scan Report: cascinadalpozzo.it

Redirected to:
https://www.cascinadalpozzo.it/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 55 IPs in 3 countries across 33 domains to perform 170 HTTP transactions. The main domain is cascinadalpozzo.it and was registered 25 years ago.

Submitted URL: https://cascinadalpozzo.it

Effective URL:
https://www.cascinadalpozzo.it/
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Legitimate-looking Italian event venue, but traffic and loaded resources show CRITICAL EtherHiding/ClickFix malware alerts and multi-feed exploit-kit Indicators of Compromise — the page appears compromised and is distributing malicious scripts.

Risk Factors (4)
CRITICAL IDS malware alerts (EtherHiding exfiltration, ClickFix domain) on traffic from this page
Multiple independent feeds report exploit-kit/clearfake malware on third-party domains loaded by the page
Primary domain itself flagged as a malware loader (single-source)
Abuse of blockchain RPC endpoints for script delivery/exfiltration
Domain age information unavailable

Details

Page Title

Event Venue al centro tra Vicenza e Padova • Convegni • Eventi Speciali • Cerimonie • | Antica Cascina Dal Pozzo

Scan Type

public

Domain Name Analysis

You're looking at domain 'cascinadalpozzo.it' on the Italian country-code top-level domain (.it). The core label 'cascinadalpozzo' covers 15 characters holding six vowels versus 9 consonants. It segments into six words: ca, sci, nadal, p, ozz, o. Expect 2.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cascinadalpozzo.it

Page Load Overview

9.08s
Total Load Time
11.8 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:8,243 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property73% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
73%
government public service
68%
education learning
61%
travel tourism
55%
adult content
49%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
889.46.104.48Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3142.251.110.97Google · CDNUnited States
AS15169Google LLC
3157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3192.178.183.100Google · CDNUnited States
AS15169Google LLC
17055--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D9043931929C562251975788E1A6FB4F2A32A762C6560AFDF2F4903DA3CDCB012D33DD

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:CPOHbEzrr+kpl0k8lH9FJbhQrt9XIKEVR8wDKRJgLSyKUaa/s4GYm1t:wwyt9XIKEVR8wD2JgLS3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:181836:UEggBwGuI4CizUIAIa8EAi0CYRqjAAqELB4gMEORU+Rg4ADIAMgBpSUJBqxJAVMe58QWAgjEEaEQYA4KDEECxMvFACJSCQRK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:012000200001ffff
Perceptual Hash:a707a92bf6da28a8
Difference Hash:46c6c4e48c8f0322
Wavelet Hash:23226060e701ffff
Color Hash:#6ce083

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data