Security Scan Report: eiffelhouse.it

Redirected to:
https://www.eiffelhouse.it/
Submitted: Oct 9, 2026, 9:44:49 AMCompleted: Oct 9, 2026, 9:45:33 AMpubliccompleted

This website contacted 15 IPs in 5 countries across 17 domains to perform 104 HTTP transactions. The main domain is eiffelhouse.it and was registered 18 years ago.

Submitted URL: https://eiffelhouse.it

Effective URL:

https://www.eiffelhouse.it/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Established Italian publisher's WordPress site appears compromised: primary domain flagged as 'clearfake' malware (2 feeds), 3 CRITICAL EtherHiding IDS alerts and blockchain-RPC payload retrieval. Pages it serves can infect visitors — avoid interaction.

Risk Factors (4)
Multi-source content-malware threat-intel match on the PRIMARY domain (clearfake / malware loaders)
CRITICAL network IDS alerts for EtherHiding malware exfiltration (x3)
Scripts load resources from content-malware-flagged third-party domains (sentrydb.org, checkyoubrowse.codes, rpc-mainnet.matic.quiknode.pro)
Blockchain RPC calls for hidden payload retrieval (EtherHiding / ClearFake campaign on a compromised WordPress site)
Domain age information unavailable

Details

Page Title

Eiffel House

Scan Type

public

Domain Name Analysis

The domain 'eiffelhouse.it' uses the Italian country-code top-level domain (.it) while skipping any subdomain. Count 11 characters in 'eiffelhouse' holding six vowels versus 5 consonants. Breaking it apart gives two words: eiffel, house. The median word length lands at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://eiffelhouse.it

Page Load Overview

9.54s
Total Load Time
4.1 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:7,023 chars
Detector Agreement:67%

Website Classification

Primary Category

entertainment media91% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
91%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2089.46.109.14Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
6142.251.14.95Google · CDNUnited States
AS15169Google LLC
6192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
6192.0.77.32San Francisco, California, United States
AS2635Automattic, Inc
6192.0.73.2San Francisco, California, United States
AS2635Automattic, Inc
6142.251.151.119Google · CDNUnited States
AS15169Google LLC
6104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
6172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10415--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1255473936041061E12F7C7C2E2B7AFE53B8A9DDCC30A68D6B165D0F0DBC9BA1581F51A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:/Tm/7FlYjiHa4GqNJEpXeaPm7KIfmsekTu3+c4utm/7CVxKlESSEjiBtG52TUa4C:/Tm/7FlYjiHa4GqNJEpXeaPm7KIfmseb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:294626:CCQGAIUFIJjgHkjgAATkZnBAItnMoFwogAaaiTkEWogg1wCSEsQIBDEgFAwJEKRG0FBUoMgdIthpCQGICAQy0DWQwAEAzM3w

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:e00080d8988100ff
Perceptual Hash:e864a73bcc43f324
Difference Hash:0405053131094105
Wavelet Hash:f680c0d8d981e1ff
Color Hash:#d2797e

Other Hashes

Crop Resistant:0405053131094105

Scan History

Scan history not available

Unable to load historical scan data