Security Scan Report: utopiagaming.it

Site favicon
Submitted: Oct 1, 2026, 4:25:04 PMCompleted: Oct 1, 2026, 4:25:45 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised WordPress gaming site serving an injected ClickFix kit: fake Cloudflare 'Human Verification' overlay that tells Windows users to paste a Terminal command (malware), with EtherHiding blockchain C2 traffic and a credential-capture login form. Do not visit.

Risk Factors (6)
Known ClickFix Win+X Terminal-lure overlay kit injected into the page
Fake Cloudflare 'Human Verification' overlay impersonating Cloudflare with spoofed Ray ID
Instructions to open Terminal/PowerShell and paste attacker-supplied commands (drive-by malware delivery)
CRITICAL IDS alerts for EtherHiding exfiltration plus blockchain RPC/contract request traffic (polygon.drpc.org, rpc.ankr.com, nodies, publicnode, 1rpc.io)
Primary domain flagged as clearfake malware; unranked in Cisco Umbrella with no reputation
Unranked third-party script host browseid.codes
Domain age information unavailable

Details

Page Title

Site under maintenance

Scan Type

public

Domain Name Analysis

Domain 'utopiagaming.it' uses the Italian country-code top-level domain (.it) and has no subdomain. The core label 'utopiagaming' covers 12 characters split between six vowels and six consonants. Word splitting yields 2 words: utopia, gaming. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://utopiagaming.it/

Page Load Overview

2.58s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:27%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:555 chars
Detector Agreement:67%
Language mismatch: Declared as it-IT but detected as de

Website Classification

Primary Category

documentation technical69% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
69%
technology software
56%
adult content
42%
entertainment media
40%

Detected Features

OG: Maintenance

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
4185.229.239.55Italy
AS60798Servereasy Srl
2104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
2104.18.10.59Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
188--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AA131BA4AD94A98DD3F7A56AC480E0DAD4A0B51261BFC3072F5F8D827FC24D474F3A58

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:MJqJqJqJqJqJqJqJqJqJqJqJngLVvN7+OO+y:MQQQQQQQQQQQYvNr5y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:42698:SNBEwjhcsAjAQWEmIncmgBgSigaBAIRTCSEFJogMgmTFAzQN1YCChPBEGSfAUV0uiRUEABSsIJRy6QRzu3AEhoPCRExxCAgR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000001818000000
Perceptual Hash:8822228888222288
Difference Hash:0000081010080000
Wavelet Hash:0c0c3c3c3c3c0c0c
Color Hash:#2d8649

Other Hashes

Crop Resistant:0000081010080000

Scan History

Scan history not available

Unable to load historical scan data