Security Scan Report: efestotrainingclub.it

Redirected to:
https://www.efestotrainingclub.it/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 3 countries across 9 domains to perform 116 HTTP transactions. The main domain is efestotrainingclub.it and was registered 4 years 8 months ago.

Submitted URL: https://efestotrainingclub.it

Effective URL:
https://www.efestotrainingclub.it/
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Likely compromised legitimate Italian gym site now serving malware: critical EtherHiding IDS alerts and a multi-feed-flagged third-party script host, with off-purpose blockchain RPC traffic. No phishing form present.

Risk Factors (4)
CRITICAL IDS malware/EtherHiding exfiltration alerts (x5) on page traffic
Multi-feed corroborated malicious third-party script host (checkyoubrowse.codes) loaded by the page
Off-purpose blockchain RPC connections inconsistent with the site's stated purpose
Domain itself reported as malware/clearfake/loader in threat intelligence
Domain age information unavailable

Details

Page Title

Main Home - Efesto Training Club

Scan Type

public

Domain Name Analysis

Within the Italian country-code top-level domain (.it), 'efestotrainingclub.it' is registered without a subdomain. The core label 'efestotrainingclub' covers 18 characters holding 7 vowels versus eleven consonants. Splitting it apart reveals five words: e, fes, to, training, club. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://efestotrainingclub.it

Page Load Overview

8.30s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:506 chars
Detector Agreement:50%

Website Classification

Primary Category

corporate35% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate
35%
government public service
25%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1689.46.105.69Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
10142.251.110.95Google · CDNUnited States
AS15169Google LLC
10104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10142.251.20.94Google · CDNUnited States
AS15169Google LLC
10188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
10104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10172.64.147.103Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10104.18.40.153Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11611--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T175B3D67333040237A2AA8DD9E149310F91E5E197E560609CFBFA15EEA5BCDE23176732

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:HoBW52mX/G3BVddi3fVaxpfbi/KinNnmBreE9xD59HMA+ELGlGHmrVMK6yAf/fgb:Hqqn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:117459:UFFgJcAAoC0PEgGAVAMphKAFGCJAlECgiDKkBHPULAEJ/kYGQKRAN5AMksegAIxcQXAUKAgQSODkYIqAAcQLDiQCIKkCVghB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0018000c2e0e0c00
Perceptual Hash:9a6c6c92676d3266
Difference Hash:313133d9d8d81931
Wavelet Hash:1919193f7f2f0f01
Color Hash:#d2797e

Scan History

Scan history not available

Unable to load historical scan data