Security Scan: Local7

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/522fe7b9-2f9b-47d4-a645-38d6ae03b821 Domain and IP registration (RDAP)/api/v1/rdap/522fe7b9-2f9b-47d4-a645-38d6ae03b821 Certificate Transparency/api/v1/ct/local7.it How often this domain was scanned/api/v1/domain/stats/local7.it Scan history for this domain/api/v1/domain/history/local7.it?limit=15

This website contacted 11 IPs in 4 countries across 12 domains to perform 26 HTTP transactions. The main domain is local7.it and was registered 8 years ago.

Submitted URL: https://www.local7.it/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised WordPress site injecting a fake Cloudflare 'Human Verification' ClickFix overlay; vetted kits and CRITICAL YARA/IDS hits show it tricks visitors into pasting attacker commands in Terminal. Do not interact.

Risk Factors (5)

Compromised WordPress site serving an injected ClickFix social-engineering overlay (fake Cloudflare 'Human Verification' page)

Two analyst-vetted CRITICAL malicious kits confirmed by name and family (ErrTraffic/Exvicy loader, ClickFix Win+X overlay)

Instructs users to open a terminal and paste attacker-supplied commands (Ctrl+V then Enter) — remote code execution / malware delivery

Blockchain RPC connections used for EtherHiding-style payload retrieval, corroborated by 9 CRITICAL IDS exfiltration alerts

Threat-intel Indicators of Compromise on the primary domain ('clearfake' malware, 2 independent feeds) and on loaded third-party resource domains

Domain age information unavailable

Details

Page Title

Local7

Scan Type

public

Favicon Hash

MMH3: 346493766

MD5: dd3a3500b3a5057f55fe919e6357ca85

Domain Name Analysis

Domain 'www.local7.it' uses the Italian country-code top-level domain (.it) and includes subdomain 'www'. The second-level label 'local7' is 6 characters long with two vowels and 3 consonants, notching 1 digit. It segments into 2 words: local, 7. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.20s

Total Load Time

322 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:652 chars

Detector Agreement:100%

Language mismatch: Declared as it-IT but detected as en

Website Classification

Primary Category

technology software47% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

47%

cryptocurrency blockchain

41%

documentation technical

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	89.46.110.62	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
2	35.214.244.104Google · CDN	Groningen, Groningen, Netherlands	AS43515Google Ireland Limited
2	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
2	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
2	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
2	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
26	11	-	-