Security Scan Report: piacerespiaggiarimini.it

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 2 countries across 9 domains to perform 86 HTTP transactions. The main domain is piacerespiaggiarimini.it and was registered 7 years ago.

Submitted URL: https://piacerespiaggiarimini.it

AI Security Verdict

High Risk

Confidence: 78%

8
Risk Score

Legitimate-looking Italian beach tourism site whose page shows CRITICAL EtherHiding malware exfiltration and loads the malware-flagged domain xaz2.com — treat as compromised and avoid.

Risk Factors (5)
CRITICAL network IDS malware alert (EtherHiding exfiltration) on the scanned page
Page loads a domain classified as malware (xaz2.com / iclickfix) corroborated by two independent threat feeds
Primary domain reported as hosting an unknown RAT (single-source, unverified)
Blockchain RPC call (tenderly.co) consistent with EtherHiding-style malicious JavaScript injection
Pattern is consistent with a compromised legitimate site serving/dropping malware
Domain age information unavailable

Details

Page Title

Piacere Spiaggia Rimini Shop

Scan Type

public

Domain Name Analysis

Domain 'piacerespiaggiarimini.it' uses the Italian country-code top-level domain (.it) without a subdomain. The core label 'piacerespiaggiarimini' covers 21 characters with 11 vowels and 10 consonants. It segments into six words: pia, ceres, pia, g, gia, rimini. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

SPIAGGIA RIMINI Y PIACERE Pubblicitae Marketing —La SpiaggiadiRimini@ ¥ GhiStabilimenti. Oltre estate ¥ Shop id 0 Questo sito utilizza i cookies! Ciao, questo sito web utiliza cookie esserziali per...

Page Load Overview

17.82s
Total Load Time
1.5 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:5,610 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media73% confidence
Type: spa
Method: ml+structural

All Detected Categories

entertainment media
73%
government public service
72%
travel tourism
71%
adult content
67%
news media journalism
63%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
9142.251.20.97Google · CDNUnited States
AS15169Google LLC
974.125.29.95Google · CDNUnited States
AS15169Google LLC
9213.152.197.145Rimini, Emilia-Romagna, Italy
AS13182Made Network Srl
9216.239.32.36Google · CDNUnited States
AS15169Google LLC
935.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
9188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.20.94Google · CDNUnited States
AS15169Google LLC
9142.251.110.97Google · CDNUnited States
AS15169Google LLC
869--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T185C2C5B705AB1A4E172497C576B7F84DC10AE0EFCAA496E3D80B493E20B86F79113D17

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:m9i5Q62I/xE6x4g5bn/+gddpVdsKgNAGav:kiC7UHVtgNAGav

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:25923:CUkhwWox0gKQQJFlAE0SyDVgZEEk2c4lfEGFFIJwCmDM+AIEYMgUALXOAQCwhAiJAAMQAYg0QhqSQpLNQCQFJMEgyQQKJJJ7

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data