Security Scan Report: weddart.it

Redirected to:
https://www.weddart.it/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 3 countries across 10 domains to perform 77 HTTP transactions. The main domain is weddart.it and was registered 7 years ago.

Submitted URL: https://weddart.it

Effective URL:
https://www.weddart.it/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate wedding-photography site whose pages were compromised with an EtherHiding ClickFix kit: obfuscated loader pulls a fake 'Human Verification' overlay from a Polygon contract. Do not follow its Terminal instructions.

Risk Factors (5)
Injected ClickFix Win+X/Terminal 'Human Verification' overlay kit (phishing/malware delivery) on a compromised legitimate site
EtherHiding: blockchain-contract-resolved second stage with CRITICAL EtherHiding exfiltration IDS alerts
Obfuscated loader script concealing malicious RPC/overlay hostnames from casual inspection
DevTools and context-menu blocking alongside obfuscation
Threat-intel IoC on the page's own domain (iclickfix malware)
Domain age information unavailable

Details

Page Title

WeddArt Studio - Matrimoni in Italia e nel mondo

Scan Type

public

Domain Name Analysis

Within the Italian country-code top-level domain (.it), 'weddart.it' is registered while skipping any subdomain. The second-level label 'weddart' is 7 characters long holding 2 vowels versus 5 consonants. Splitting it apart reveals 2 words: wed, dart. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://weddart.it

Page Load Overview

2.36s
Total Load Time
6.3 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:5,147 chars
Detector Agreement:60%

Website Classification

Primary Category

entertainment media72% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
72%
corporate
35%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1489.46.108.60Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
7104.17.208.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.13.97Google · CDNUnited States
AS15169Google LLC
7172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
735.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
7104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7216.239.34.36Google · CDNUnited States
AS15169Google LLC
7178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
7188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7710--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14504D7675340463EA3CC48C0A416B20B66E1E00BD524A5DCF7FD96EFBF8DA9214B6736

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:WKKtojzsaLLV77pqdbVn601Ofvl7Qi5DXqSgUQBX/6:SKzsaL01eF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:185731:ESDg5yAcWAkIQUXGQjEUwZEqQoDeVERiiEG3IebIoxICwh4SmEDCkDMBgYIIKFijAV8JYBcBPgFAwM9BODAAEAKQjOUiCICj

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff383c1000000808
Perceptual Hash:8ec6c9e7b1b0b0b1
Difference Hash:e360616471695151
Wavelet Hash:ff3c3f3f19210908
Color Hash:#c7e06c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data