Security Scan Report: perbacco-ristorante.it

Redirected to:
https://www.perbacco-ristorante.it/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 11 IPs in 2 countries across 5 domains to perform 44 HTTP transactions. The main domain is perbacco-ristorante.it and was registered 18 years ago.

Submitted URL: https://perbacco-ristorante.it

Effective URL:
https://www.perbacco-ristorante.it/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate 18-year-old restaurant domain that has been compromised: CRITICAL ClearFake/Mordant hunting-rule hits, EtherHiding payload retrieval from BSC testnet RPCs and a CRITICAL malware IDS alert. No forms, but visitors are exposed to malware.

Risk Factors (5)
Compromised WordPress site serving a ClearFake/Mordant EtherHiding loader and a PHP backdoor
Obfuscated inline JavaScript with eval() that hides blockchain RPC endpoints
Eight cross-origin fetch targets to BSC testnet RPC/data-seed nodes used for payload retrieval
CRITICAL network IDS malware/exfiltration alert on the captured traffic
Threat-intel malware classification of the primary domain (single-source, unverified)
Domain age information unavailable

Details

Page Title

Chi siamo - Ristorante Perbacco! - Wedding e Catering

Scan Type

public

Domain Name Analysis

Domain 'perbacco-ristorante.it' uses the Italian country-code top-level domain (.it) and has no subdomain. Count 19 characters in 'perbacco-ristorante' split between 7 vowels and eleven consonants, notching 1 hyphen. Segmentation suggests 6 words: per, bac, co, ri, stor, ante. The median word length lands at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://perbacco-ristorante.it

Page Load Overview

2.06s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:98%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:9,537 chars
Detector Agreement:82%
Language mismatch: Declared as it-IT but detected as en

All Detected Languages

🇺🇸en(98%)🇮🇹it(1%)🇪🇸es(0%)

Website Classification

Primary Category

blog personal website36% confidence
Type: spa
Method: ml+structural

All Detected Categories

blog personal website
36%
documentation technical
36%
corporate
35%
news media journalism
29%
technology software
26%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
3789.46.105.24Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
4104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
415.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
452.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
43.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
415.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
4411--

Detected Technologies16

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A0946C76340F14380257B16AB4CB5804F959465390E3E0F7F29D8A28B4FE7D8A277B9E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:3QSkJ9/L26YY0z6rIf2O8F17rlEIdImPXt6:FW9hNZNs

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:431868:B4C1hHBmZETKuT1WBAwTbCXokg3EmVKCwMDAAFnYRmBHAAQAJIKBUAMyAVxACYCYBBDyCDigERQAYwml7NjIsTtIvKkQJsAa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:010103030f0f010f
Perceptual Hash:aa4d529ad74c9595
Difference Hash:9117a3235f9b455d
Wavelet Hash:5f0103032f4f3f2f
Color Hash:07000000000

Other Hashes

Crop Resistant:9117a3235f9b455d

Scan History

Scan history not available

Unable to load historical scan data