Security Scan: RSPP Multiservice

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5297c095-5f87-4049-9ae4-ee970d84056d Domain and IP registration (RDAP)/api/v1/rdap/5297c095-5f87-4049-9ae4-ee970d84056dHow often this domain was scanned/api/v1/domain/stats/rsppmultiservice.it Scan history for this domain/api/v1/domain/history/rsppmultiservice.it?limit=15

This website contacted 22 IPs in 3 countries across 14 domains to perform 94 HTTP transactions. The main domain is rsppmultiservice.it and was registered 7 years ago.

Submitted URL: https://rsppmultiservice.it

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate Italian safety-training business whose site is compromised and serving a ClickFix 'Human Verification' overlay (CRITICAL YARA/roster) plus EtherHiding exfiltration; do not interact or follow its instructions.

Risk Factors (5)

Active ClickFix phishing overlay kit injected into the page (YARA + kit roster, CRITICAL)

EtherHiding malware exfiltration IDS alerts (CRITICAL) via blockchain RPC hosts

Third-party malicious hosts loaded by page scripts (checkyoubrowse.codes, rehearsal-b.com)

Compromised/injected page content (unrelated gambling link embedded in site copy)

Suspicious multi-source threat-intel match on primary domain (unknown loader, unverified single-source)

Domain age information unavailable

Details

Page Title

RSPP Multiservice

Scan Type

public

Favicon Hash

MMH3: 530492348

MD5: dcab89b8e04bf53fcd7f6a44a8cb4fae

Domain Name Analysis

Domain 'rsppmultiservice.it' uses the Italian country-code top-level domain (.it) with no subdomain. The registrable portion 'rsppmultiservice' spans 16 characters containing five vowels alongside eleven consonants. Segmentation suggests 4 words: r, spp, multi, service. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.78s

Total Load Time

2.1 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:10,894 chars

Detector Agreement:100%

Website Classification

Primary Category

corporate business38% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

38%

news/blog

20%

Detected Features

Articles

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	37.59.236.156	France	AS16276OVH SAS
4	142.251.20.97Google · CDN	United States	AS15169Google LLC
4	142.251.20.95Google · CDN	United States	AS15169Google LLC
4	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.18.11.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	138.68.49.108	Santa Clara, California, United States	AS14061DigitalOcean, LLC
4	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
4	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
4	216.239.32.36Google · CDN	United States	AS15169Google LLC
94	22	-	-