ScanMalware.com

Security Scan Report: brondelloerminio.it

Site favicon
Submitted: Sep 17, 2026, 4:47:27 PMCompleted: Sep 17, 2026, 4:48:35 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 90%

8
Risk Score

Legitimate Italian woodworking site compromised, now serving malware/exploit kit via blockchain and malicious resources. Avoid interaction.

Risk Factors (5)
Compromised legitimate website serving malware and exploit kit
EtherHiding exfiltration technique using blockchain smart contracts for command-and-control
Exploit kit activity (ErrTraffic Beer Cluster Checkin) detected
Connections to flagged malicious IP and domain as sub-resources
No credential or payment forms, but active malware distribution
Domain age information unavailable

Details

Page Title

Parquet, mobili in legno, rivestimenti masselli – Brondello Erminio

Scan Type

public

Domain Name Analysis

The domain name 'brondelloerminio.it' uses the Italian country-code top-level domain (.it) with no subdomain. Count 16 characters in 'brondelloerminio' with 7 vowels and 9 consonants. Word splitting yields five words: bron, dello, erm, in, io. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://brondelloerminio.it

Page Load Overview

23.35s
Total Load Time
2.7 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:8,077 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
153.79.157.7Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
6142.251.20.97Google · CDNUnited States
AS15169Google LLC
6142.251.13.94Google · CDNUnited States
AS15169Google LLC
6142.251.127.97Google · CDNUnited States
AS15169Google LLC
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6216.239.32.36Google · CDNUnited States
AS15169Google LLC
6142.251.127.155Google · CDNUnited States
AS15169Google LLC
6142.251.20.94Google · CDNUnited States
AS15169Google LLC
6142.251.110.94Google · CDNUnited States
AS15169Google LLC
11117--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T12113B633B005206D6B2EE7EDA1D2970F75299D25850735FDB1E224AC83CDAF604EB25B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:jnbVZdypQ9VsnykbPMNXMbQv6QSCUcT6aEFYasDLj:n9ypDnykbPMNXMsv6QSCUcT6aEFYasDv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:42501:aYlREBABEAAyRiMCAoSwBjyBPGExUZWCKNROC06HFQgkTKKeABQjKAQsBgGAEIw6ABAkOa4WBAISKjAwQGAARIhkFAQAYQ9r

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff878787878787ff
Perceptual Hash:be8fc132c938c1ce
Difference Hash:1f6f2e2c2d2c2d2c
Wavelet Hash:87838787070707fe
Color Hash:#2d1f93

Other Hashes

Crop Resistant:1f6f2e2c2d2c2d2c,86e4e4e4c4e4e0e1,6474747674717171

Scan History

Scan history not available

Unable to load historical scan data