Security Scan Report: montagnafutura.com

Redirected to:
https://www.montagnafutura.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 26 IPs in 4 countries across 19 domains to perform 347 HTTP transactions. The main domain is montagnafutura.com and was registered 4 years 5 months ago.

Submitted URL: https://montagnafutura.com

Effective URL:
https://www.montagnafutura.com/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Genuine Italian cultural-district site whose pages have been compromised to run an EtherHiding loader: obfuscated JS pulls payloads from BSC blockchain contracts, with 19 CRITICAL malware IDS alerts and the domain flagged as a malware loader. No credential forms.

Risk Factors (4)
EtherHiding loader retrieving payloads from a blockchain contract (network-trojan behaviour)
Decoded/obfuscated script hides threat-intel-flagged blockchain hosts, including a Vidar-associated domain
19 CRITICAL IDS alerts for malware exfiltration
Primary domain flagged as malware loader / clearfake in threat intelligence
Domain age information unavailable

Details

Page Title

Montagnafutura - Home - Montagna Futura

Scan Type

public

Domain Name Analysis

You're looking at domain 'montagnafutura.com' on the commercial generic top-level domain (.com) without a subdomain. The registrable portion 'montagnafutura' spans 14 characters containing 6 vowels alongside 8 consonants. Splitting it apart reveals four words: montag, na, fu, tura. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

I NOSTRI MUSEI MULTIMEDIA. contati Q ite )) Noi e terze parti selezionate utilizziamo cookie 0 tecnologie simili per finalità tecniche e, con il tuo consenso, anche per le finalità di esperienza com...

Page Load Overview

10.00s
Total Load Time
17.0 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:5,226 chars
Detector Agreement:75%

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%
news/blog
40%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2231.11.36.36Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
13142.251.127.95Google · CDNUnited States
AS15169Google LLC
13185.111.111.154Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
1379.127.204.113Datacamp · CDNPrague, Prague, Czech Republic
AS60068Datacamp Limited
1352.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1315.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
13142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
13172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1315.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
133.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
34726--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15FF48E32798A2036111B62DEB0976A2CE45FD282D35395F2F29DC728A7F9FD03127646

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:/rczBS+/Bny6PAHOwcrCAIaoj3cnMiRiBV0ILo8Y632r:uBS+Br1wJcoDTY

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:774250:uMQErwxhIFJDICgJgCIgEAgFCCRsACQhIZ0WABgVISIQYSAC+go1IJENZBPIASGIPtpUwOaEOGGZCU5QykSlhAhEEgBlQCAQ

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7d39bd3d1d3d0998
Perceptual Hash:8ac47d219d96f694
Difference Hash:f1e1617979597971
Wavelet Hash:7f393d3d1d2d0888
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data