Security Scan Report: barvin.it

Redirected to:
https://www.barvin.it/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 4 countries across 19 domains to perform 84 HTTP transactions. The main domain is barvin.it and was registered 26 years ago.

Submitted URL: https://barvin.it

Effective URL:
https://www.barvin.it/
Redirected

AI Security Verdict

High Risk

Confidence: 93%

9
Risk Score

Legitimate Italian music-publishing site that has been compromised with an ErrTraffic/Exvicy EtherHiding loader; do not browse until the injection is cleaned.

Risk Factors (5)
Injected ErrTraffic/Exvicy ClickFix loader (hunting rule + kit roster CRITICAL) on a compromised WordPress page
EtherHiding: script resolves its next stage from a blockchain contract (8 CRITICAL IDS alerts)
Obfuscated JavaScript with decoded network sinks to threat-feed hosts
Page scripts fetch from multi-source-corroborated malware domains (recap-cha.xyz, framesavecloudjs.beer)
Blockchain RPC connections consistent with EtherHiding delivery infrastructure
Domain age information unavailable

Details

Page Title

Barvin edizioni musicali |

Scan Type

public

Domain Name Analysis

Within the Italian country-code top-level domain (.it), 'barvin.it' is registered while skipping any subdomain. Count 6 characters in 'barvin' holding two vowels versus four consonants. Splitting it apart reveals 3 words: bar, v, in. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

@O® MUSICA STAMPATA CD EVENTI PHOTO GALLERY — LINKS —GONTATII SHOP USER Q =; pat Var. BARVIN EDIZIONI MUSICALI oe “TNOSTRI ARTISTI - PROSSIMI EVENTI

Page Load Overview

7.78s
Total Load Time
2.1 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:391 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media48% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
48%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1631.11.36.10Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
4142.250.154.95Google · CDNUnited States
AS15169Google LLC
4142.251.155.119Google · CDNUnited States
AS15169Google LLC
464.130.32.46Frankfurt am Main, Hesse, Germany
AS20326TeraSwitch Networks Inc.
4104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.26.2.238Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8418--

Detected Technologies12

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15B534DDB1D4EA8320202A595A576E51CB377941BCA81CEA5FBFD1174FFC0E9C053268D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:N6Y24N9QAiRPMkK4D6CIL/MTFWrOCoU7df7+0Ml+b8bZbEpraQgI4+Rb3pywYdQU:YY24N9tiRPMkpbF2OPU7dD+0M+b8bZbP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:61492:knmyoAQARuoMpkJitmOnABgfIIGESKBwUAUo00A0E0BkRIAAQwRhEgPKIFABAgCwKIQBBwICRmYGZEEtEJzkEQzEQDSBBGGo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:2060fefefe7e1c00
Perceptual Hash:d4e11b8e2ab93cd4
Difference Hash:54d4949494b4b43c
Wavelet Hash:2060eefefe7e1c00
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data