Security Report: macosrl.it - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c613f5d2-a155-4591-86e8-3bcfc611e0e1 Domain and IP registration (RDAP)/api/v1/rdap/c613f5d2-a155-4591-86e8-3bcfc611e0e1How often this domain was scanned/api/v1/domain/stats/macosrl.it Scan history for this domain/api/v1/domain/history/macosrl.it?limit=15

This website contacted 26 IPs in 3 countries across 15 domains to perform 164 HTTP transactions. The main domain is macosrl.it and was registered 26 years ago.

Submitted URL: https://macosrl.it

Effective URL:

https://www.macosrl.it/en/home-english/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate 26-year-old Italian manufacturer's site is compromised: a ClickFix 'Human Verification' overlay (CRITICAL YARA/kit-roster hit, CRITICAL IDS malware + EtherHiding alerts) pushes Windows visitors to paste a malicious Terminal command.

Risk Factors (5)

Injected ClickFix social-engineering overlay instructing Windows users to open Terminal and paste a command (malware distribution)

CRITICAL YARA phishing-kit hit and analyst-vetted kit-roster identification on a legitimate-looking corporate page

CRITICAL IDS malware/C2 alerts (ClickFix domain, EtherHiding exfiltration) tied to the page's network behaviour

Blockchain RPC and external script resources characteristic of the EtherHiding/ClickFix delivery chain

Third-party resource checkyoubrowse.codes corroborated as malicious by 2 feeds

Domain age information unavailable

Details

Page Title

Maco Srl – Lavorazione Tubi Rame e Alluminio

Scan Type

public

Favicon Hash

MMH3: 93915454

MD5: 170485e2daeb9f5d91200479e566fcb7

Domain Name Analysis

The domain name 'macosrl.it' uses the Italian country-code top-level domain (.it) and has no subdomain. The second-level label 'macosrl' is 7 characters long holding 2 vowels versus five consonants. Splitting it apart reveals three words: mac, osr, l. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.18s

Total Load Time

4.9 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:37%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-GB

Text Length:18,339 chars

Detector Agreement:75%

Language mismatch: Declared as en-GB but detected as it

Website Classification

Primary Category

documentation technical81% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

81%

corporate business

71%

adult content

50%

social media network

44%

phishing scam

37%

Detected Features

Articles

OG: article

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
14	31.11.36.22	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
6	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
6	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
6	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	142.251.110.95Google · CDN	United States	AS15169Google LLC
6	142.251.14.94Google · CDN	United States	AS15169Google LLC
6	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
6	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
6	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
164	26	-	-