Security Report: snalspisa.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d84920c3-de3f-4272-acf2-055f461c1c22 Domain and IP registration (RDAP)/api/v1/rdap/d84920c3-de3f-4272-acf2-055f461c1c22 Certificate Transparency/api/v1/ct/snalspisa.com How often this domain was scanned/api/v1/domain/stats/snalspisa.com Scan history for this domain/api/v1/domain/history/snalspisa.com?limit=15

This website contacted 13 IPs in 5 countries across 9 domains to perform 40 HTTP transactions. The main domain is snalspisa.com and was registered 8 months ago.

Submitted URL: https://snalspisa.com/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate 10-year-old Italian union site has been compromised: analyst-vetted ClickFix/AMOS stealer and ErrTraffic phishing loaders, critical malware IDS alerts, blockchain exfiltration, and casino spam injected. Avoid.

Risk Factors (7)

Indicator of Compromise match on the primary domain for content-malware ('clearfake') corroborated by two independent feeds

ClickFix / AMOS macOS stealer loader injected into the page (byte-identical roster match)

ErrTraffic/Exvicy injected WordPress phishing loader confirmed by YARA

Critical network IDS alerts for malware C2, EtherHiding exfiltration and exploit-kit beaconing from admin-ajax.php

Blockchain RPC endpoints contacted (polygon.rpc.hypersync.xyz, rpc-mainnet.matic.quiknode.pro) and EtherHiding exfiltration traffic

Hijacked site content: unrelated Russian casino and sports-betting SEO spam injected into a teacher-union website

Third-party script hosts reported as malware (trackerredirect.online 'iclickfix', browseid.codes 'malicious host', campaigntracker.icu 'iclickfix') loaded by the page

Domain age information unavailable

Details

Page Title

SNALS PISA – SNALS PISA

Scan Type

public

Favicon Hash

MMH3: 1198047028

MD5: 000bf649cc8f6bf27cfb04d1bcdcd3c7

Domain Name Analysis

You're looking at domain 'snalspisa.com' on the commercial generic top-level domain (.com) with no subdomain. The core label 'snalspisa' covers 9 characters with 3 vowels and six consonants. It segments into four words: s, nal, s, pisa. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

81.34s

Total Load Time

N/A

Total Size

Language Analysis

Primary Language

🇷🇺Russian

Code: ru

Confidence:60%

Script:Cyrillic

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:4,425 chars

Detector Agreement:50%

Language mismatch: Declared as it-IT but detected as ru

Website Classification

Primary Category

education learning77% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

education learning

77%

government public service

73%

finance banking

59%

adult content

54%

healthcare medical

46%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
4	185.2.4.44	Italy	AS39729Register S.p.A.
3	142.251.110.95Google · CDN	United States	AS15169Google LLC
3	77.221.153.211	Paris, Île-de-France, France	AS210644Aeza Group LLC
3	185.92.183.208	Riga, Riga, Latvia	AS56971Cgi Global Limited
3	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
3	86.107.37.97	Italy	AS52030Server Plan S.r.l.
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	193.32.220.133	Frankfurt am Main, Hesse, Germany	AS48314IP-Projects GmbH & Co. KG
3	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
0	13	-	-