Security Scan Report: ciccarelli.com

Site favicon
Submitted: Sep 25, 2026, 4:50:57 PMCompleted: Sep 25, 2026, 4:53:12 PMpubliccompleted

This website contacted 34 IPs in 2 countries across 26 domains to perform 91 HTTP transactions. The main domain is ciccarelli.com and was registered 17 years ago.

Submitted URL: https://ciccarelli.com/practice-areas/criminal-defense/expungement/pardon/

AI Security Verdict

Moderate Risk

Confidence: 75%

5
Risk Score

Legitimate law firm likely compromised; footer contains injected links to spam and flagged malware/abuse domains. No credential or payment forms, but avoid clicking external links.

Risk Factors (3)
Injected/unrelated outbound links to multiple unrelated domains
Outbound link to domain flagged for malware (strelastealer)
Outbound links to domains flagged for abuse/known attacker reputation
Safety Factors (5)
27-year-old domain registered in 1998
Self-branding matches domain (ciccarelli.com)
Physical addresses and phone number visible
No credential or payment forms; only standard contact/inquiry form
No YARA, IDS, or JavaScript behavioral malware signals
Domain age information unavailable

Details

Page Title

Chester County Pardon Lawyer | Ciccarelli Law Offices

Scan Type

public

Domain Name Analysis

The domain 'ciccarelli.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'ciccarelli' stretches across 10 characters holding four vowels versus six consonants. Tokenizing the label suggests 4 words: c, icc, are, lli. Median word length comes out to 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://ciccarelli.com/practice-areas/criminal-defense/expungement/pardon/

Page Load Overview

5.81s
Total Load Time
1.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:11,913 chars
Detector Agreement:75%

Website Classification

Primary Category

news/blog70% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
70%

Detected Features

Search
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25162.159.135.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.95Google · CDNUnited States
AS15169Google LLC
218.245.60.3Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2142.251.14.97Google · CDNUnited States
AS15169Google LLC
23.171.214.35Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
213.33.187.110Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
2142.251.154.119Google · CDNUnited States
AS15169Google LLC
2172.64.153.218Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9134--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11394D753EA541229A212D3B57957E708E331E040E75518F4F2BE1C6CC3BEEA429A37DE

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:qCcdywCgPbxSOr1krp/3Pu8d/c7J5EXfbD/ZSQ/wWkxYAnG2DAzTRaGl4qJM2J/F:qC/qkp/3PH07J5I/ZSQ2G2MVGS

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:415848:XIgiSAotKALCBVGp2LBpIJIRKugSCZSQhLCi0AQT0ICQCIbEAaJBAIREYESoDDAATAIKCbyCSiiYxdAQWjCkgAsiELEjhWAm

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000f0703083f3fff
Perceptual Hash:8f70de4b7886e462
Difference Hash:33bbbeb6fb796d6a
Wavelet Hash:000f070b0a3f3fff
Color Hash:#53ac54

Scan History

Scan history not available

Unable to load historical scan data