ScanMalware.com

Security Scan Report: aennepress.it

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7dd4be23-c6dc-40f8-b905-b0272232f823Domain and IP registration (RDAP)/api/v1/rdap/7dd4be23-c6dc-40f8-b905-b0272232f823How often this domain was scanned/api/v1/domain/stats/aennepress.itScan history for this domain/api/v1/domain/history/aennepress.it?limit=15
This website contacted 11 IPs in 2 countries across 3 domains to perform 41 HTTP transactions. The main domain is aennepress.it and was registered 27 years ago.

Submitted URL: https://aennepress.it

AI Security Verdict

High Risk

Confidence: 78%

7
Risk Score

Legitimate-looking Italian publishing site, but its own domain is corroborated as ClearFake malware by two threat-intel feeds and its scripts fetch BSC testnet RPC nodes — treat as compromised, do not interact.

Risk Factors (4)
Multi-source (2 feeds) threat-intelligence match naming the primary domain as ClearFake malware — page content is likely compromised/injected
Unexpected outbound fetch calls from page scripts to eight BSC testnet blockchain RPC nodes, a pattern associated with injected wallet/drainer or bootloader scripts
WordPress installation matching the usual infection vector for this malware family
Unranked in Cisco Umbrella despite a 27-year-old registration, consistent with an abandoned/compromised site
Domain age information unavailable

Details

Page Title

Aenne Press – Un nuovo sito targato WordPress

Scan Type

public

Domain Name Analysis

The domain 'aennepress.it' uses the Italian country-code top-level domain (.it) while skipping any subdomain. Count 10 characters in 'aennepress' split between 4 vowels and six consonants. Word splitting yields three words: a, enne, press. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://aennepress.it

Page Load Overview

12.62s
Total Load Time
5.3 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:2,085 chars
Detector Agreement:67%

Website Classification

Primary Category

entertainment media96% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
96%
social media network
56%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11194.182.111.166Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
3142.251.20.95Google · CDNUnited States
AS15169Google LLC
352.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
315.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
315.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
33.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
3142.251.13.94Google · CDNUnited States
AS15169Google LLC
4111--

Detected Technologies8

WordPressv7.1.3
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Ubuntu
40%
Slider Revolution
20%
HashThemes Total
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10FC39EB29380103B8537639D6924B35CB26AEB05CF4B56F8F2F99118A3CEDB115B764C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:UaHQmsWrOqVOxdolU9361I2QHhVGccnDHJ+GE21:bsWrOqVOxdolU9361IiL1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:128372:QaKYyTQKFfAAWjJkggJwLFSlTkAgCiBeBNAJ0QTkgWgsKhqCOkIBnNAQQTAAlSxCAGCcJ2hAaIYXOItLVChJgZRkSASF4Fjo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000000010fff7f3
Perceptual Hash:ee13a0934f86937c
Difference Hash:eff3e5e363252723
Wavelet Hash:07000030b8fffff7
Color Hash:#acd279

Other Hashes

Crop Resistant:eff3e5e363252723,333b242c287838bc,cce7ebd5e4e16231,70f2f9ec67d5e462

Scan History

Scan history not available

Unable to load historical scan data