Security Scan Report: www.centrovertiginitorino.it

Site favicon
Submitted: Completed: publiccompleted
This website contacted 22 IPs in 3 countries across 11 domains to perform 89 HTTP transactions. The main domain is centrovertiginitorino.it and was registered 11 years ago.

Submitted URL: https://www.centrovertiginitorino.it

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Legitimate audiology site compromised with a ClickFix Windows kit (Win+X/Terminal overlay) and an EtherHiding blockchain loader; primary domain flagged as malware by two feeds. Do not interact.

Risk Factors (5)
Injected ClickFix 'Human Verification' social-engineering kit steering Windows users to paste a malicious PowerShell command
EtherHiding blockchain-based loader retrieving its payload host from a Polygon smart contract
Obfuscated JavaScript concealing known-attacker / threat-feed domains (tenderly, drpc, 1rpc)
Multiple CRITICAL IDS malware/exploit-kit alerts and CRITICAL YARA malware matches
Unranked third-party script host (browse-codes-enter.beer) serving code with no relation to the audiology practice
Domain age information unavailable

Details

Page Title

Centro Vertigini - Terapie a Torino per Vertigini, Acufeni, Ipoacusie

Scan Type

public

Domain Name Analysis

Domain 'www.centrovertiginitorino.it' uses the Italian country-code top-level domain (.it) with subdomain 'www'. The registrable portion 'centrovertiginitorino' spans 21 characters split between nine vowels and twelve consonants. It segments into 6 words: cent, rover, tig, in, i, torino. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.centrovertiginitorino.it

Page Load Overview

3.97s
Total Load Time
15.1 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:6,100 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical49% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
49%
corporate
25%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
589.46.108.52Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
4150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
4172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
435.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.153.119Google · CDNUnited States
AS15169Google LLC
4142.251.14.120Google · CDNUnited States
AS15169Google LLC
4172.217.118.4Google · CDNUnited States
AS15169Google LLC
4172.217.115.4Google · CDNUnited States
AS15169Google LLC
8922--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14B85F837031493BEB6D4C9C19224B11B62F5EA27A478246DFB466DEFBD1D88350B8933

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Ee2OqkWMe2OqkWMe2OqkWMe2OqkWMe2OqkWMe2OqkWMe2OqkWMe2OqkWMe2OqkWn:15BE+Xml6RI

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1810319:SQiksNFJgQF+BASiBYqYLyUYB04MEjQCQAQNCJFApiKIREoBjFAUAQEsZcghuc6AG9OyBQloUJEQCEGykwKgnBAABEs0MIZa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffe0000000a0ffff
Perceptual Hash:e2559dac929a2765
Difference Hash:50c24a090505211b
Wavelet Hash:ffe0a00000e0ffff
Color Hash:#ac8053

Scan History

Scan history not available

Unable to load historical scan data