Security Scan Report: ligeacenter.it

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 3 domains to perform 38 HTTP transactions. The main domain is ligeacenter.it and was registered 4 years 7 months ago.

Submitted URL: https://ligeacenter.it

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Established Italian shopping-centre site flagged by two threat feeds as 'clearfake' malware, with page scripts hitting Binance Smart Chain testnet RPC nodes (EtherHiding/ClearFake pattern) — likely compromised WordPress serving injected malicious code.

Risk Factors (3)
Primary-domain threat-intel match for a named malware family (clearfake), corroborated across two independent feeds
Browser scripts call Binance Smart Chain testnet RPC nodes — blockchain-based payload/C2 hosting technique associated with ClearFake
WordPress site likely compromised for drive-by malware injection
Domain age information unavailable

Details

Page Title

LigeaCenter

Scan Type

public

Domain Name Analysis

You're looking at domain 'ligeacenter.it' on the Italian country-code top-level domain (.it) without a subdomain. The second-level label 'ligeacenter' is 11 characters long with five vowels and six consonants. Word splitting yields three words: l, igea, center. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ligeacenter.it

Page Load Overview

3.57s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:1,440 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network93% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
93%
corporate business
66%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11194.182.111.166Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
315.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
315.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
352.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
33.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3192.178.183.94Google · CDNUnited States
AS15169Google LLC
3810--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T110F3AEB2D301A43B062B86DD748C738DF1DAD60ACF05D8A0B1F5919BBBD6F7245A3618

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:TJCxnMX4x4t32w4z6vrQu9tX0ydc4o7mA6ifO03RczZdNGZJ0mNYkit+Pd:kz4Ilu/kydc4oj6/03Ry/NGZJR

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:166803:kQMRBEADEABJEKxNIDD4gIlIBwAcAGKSGBvjQtFheEbMADQaQiRmak5hGiQEpBWCQsaAFEAAahIHAgmgAkAklCHJGwEg4AET

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000000ffffff
Perceptual Hash:b21cf4f34c27934c
Difference Hash:71b8b159c9494d0f
Wavelet Hash:00000000ffffffff
Color Hash:#6a2d86

Scan History

Scan history not available

Unable to load historical scan data