Security Scan Report: cipensoio.online

Redirected to:
https://www.cipensoio.online/
Site favicon
Submitted: Oct 9, 2026, 11:25:11 AMCompleted: Oct 9, 2026, 11:26:13 AMpubliccompleted

This website contacted 25 IPs in 3 countries across 18 domains to perform 190 HTTP transactions. The main domain is cipensoio.online and was registered 21 years ago.

Submitted URL: https://cipensoio.online

Effective URL:

https://www.cipensoio.online/
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Established Italian food-delivery site that appears compromised: a CRITICAL EtherHiding malware IDS alert, anomalous blockchain RPC/contract calls, and a malicious-host resource (checkyoubrowse.codes) indicate it is being used to load malware.

Risk Factors (5)
CRITICAL IDS malware alert (ET MALWARE EtherHiding Exfil M2) indicating active malware loading/exfiltration
Blockchain RPC connections and Ethereum getDomain() contract requests on a page with no web3 purpose — anomalous and consistent with EtherHiding loader behavior
Page loads script/resources from checkyoubrowse.codes, a host corroborated as malicious by two independent threat-intel feeds
Page domain cipensoio.online itself reported as an unknown malware loader
Third-party resource address 178.16.52.101:443 flagged as "ek clearfake" exploit-kit infrastructure by two feeds; eval()/Function() dynamic code execution present
Domain age information unavailable

Details

Page Title

Ci Penso Io – Servizio a domicilio

Scan Type

public

Domain Name Analysis

The domain 'cipensoio.online' uses the modern generic top-level domain (.online) without a subdomain. The second-level label 'cipensoio' is 9 characters long split between five vowels and four consonants. Segmentation suggests 4 words: ci, pen, so, io. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cipensoio.online

Page Load Overview

6.53s
Total Load Time
3.7 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:4,329 chars
Detector Agreement:75%

Website Classification

Primary Category

government public service32% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

government public service
32%

Detected Features

Search
Articles
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2246.231.27.37Italy
AS60460Aziende Italia S.r.l.
7142.251.110.94Google · CDNUnited States
AS15169Google LLC
7142.251.127.95Google · CDNUnited States
AS15169Google LLC
7104.26.9.123Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7192.178.183.97Google · CDNUnited States
AS15169Google LLC
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
7172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.155.4Google · CDNUnited States
AS15169Google LLC
7142.251.13.136Google · CDNUnited States
AS15169Google LLC
7192.178.183.113Google · CDNUnited States
AS15169Google LLC
19025--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D014977351CE402AA369CBE07520FB5EE6979007C914DED8FEAC478CA7C0D943D939A9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:67kinxJWAktgkfkgkkV9CeNRjxzFT1n/jqYCfD4SZI6nMYOUAr5mXEzadkFgMOye:IrmGCBtFT1n/jqYCfcSZI6nMYOUAr5mX

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:195909:FAKCHMAIBjIKUMcyjA1EoDIADVKATgIS0y4NIIgARwoZMAVAIcME4KsIHkUpKgUpJAY1LBQAJSBGRDiBEARllEgOR1pbCURF

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff0070e14246df
Perceptual Hash:e4cb91e6ee107728
Difference Hash:08cdd0e4c7cc9cb8
Wavelet Hash:ffff0070610046df
Color Hash:#4077bf

Scan History

Scan history not available

Unable to load historical scan data