ScanMalware.com

Security Scan Report: bloccostudentesco.org

Redirected to:
https://www.bloccostudentesco.org/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/73b630ff-0ed2-44b9-8fed-05c73116fddcDomain and IP registration (RDAP)/api/v1/rdap/73b630ff-0ed2-44b9-8fed-05c73116fddcHow often this domain was scanned/api/v1/domain/stats/bloccostudentesco.orgScan history for this domain/api/v1/domain/history/bloccostudentesco.org?limit=15
This website contacted 11 IPs in 2 countries across 5 domains to perform 49 HTTP transactions. The main domain is bloccostudentesco.org and was registered 20 years ago.

Submitted URL: https://bloccostudentesco.org

Effective URL:
https://www.bloccostudentesco.org/
Redirected

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Established Italian political site whose domain is flagged by two independent feeds as ClearFake malware and whose scripts fetch from Binance Smart Chain testnet nodes; likely compromised, not phishing, but do not interact.

Risk Factors (4)
Primary domain carries a multi-source corroborated malware indicator (ClearFake/clearfake, ThreatFox + misp.scanmalware)
Scripts contact multiple external Binance Smart Chain testnet RPC nodes, a known payload-fetch channel for injected web malware
eval() dynamic code execution detected in page script
Domain is unranked in Cisco Umbrella (weak prior only)
Domain age information unavailable

Details

Page Title

Blocco Studentesco - Noi vogliamo tutto!

Scan Type

public

Domain Name Analysis

The domain 'bloccostudentesco.org' uses the non-profit oriented generic top-level domain (.org). Its registrable label 'bloccostudentesco' stretches across 17 characters holding six vowels versus 11 consonants. Word splitting yields four words: bloc, co, studen, tesco. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bloccostudentesco.org

Page Load Overview

2.95s
Total Load Time
10.2 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:12,452 chars
Detector Agreement:50%

Website Classification

Primary Category

corporate70% confidence
Type: dynamic
Method: structural

All Detected Categories

corporate
70%
forum
50%
news/blog
40%

Detected Features

Search
Articles
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
931.11.36.13Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
4142.251.110.95Google · CDNUnited States
AS15169Google LLC
4142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
4172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
43.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
415.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
435.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
415.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4911--

Detected Technologies10

X-UA-Compatible
100%
WordPressv7.1.3
100%
Open-Graph-Protocolvwebsite
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
HTTP/3
40%
Aruba.it
40%
Premio Chaty
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EE549FF342CF586B1366628C3C60EA3CDB978375CB894FE4B2E25074DD819E15B6825E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:U5himB9HqFIwjAdOHbU4JLAURxIDC1yxmzeL5JfeYLYQYMX3Q:ShIIw08MJQeLrmAZnQ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:280503:5gCGJBkALiFaMqBhYCloCEHPJAIBBvEAbh6JQSVPiDAhIIogQKgDQGAgARcCKAQAgRGqhxEQm1wBiAcTIgRCpGQAFqEIYtSF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00c7c7c7c7ffffc7
Perceptual Hash:b4364bcb36494b39
Difference Hash:0d1c1f1f2f3b2b2e
Wavelet Hash:0087878787fbf983
Color Hash:#352dd2

Other Hashes

Crop Resistant:0d1c1f1f2f3b2b2e,0101012e2d010501,9c9cbc3433382058,c707173735b4a424

Scan History

Scan history not available

Unable to load historical scan data