Security Scan Report: affittacameresenigallia.it

Redirected to:
https://www.affittacameresenigallia.it/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 29 IPs in 3 countries across 18 domains to perform 123 HTTP transactions. The main domain is affittacameresenigallia.it and was registered 10 years ago.

Submitted URL: https://affittacameresenigallia.it

Effective URL:
https://www.affittacameresenigallia.it/
Redirected

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Established Italian guesthouse whose WordPress site appears compromised: CRITICAL EtherHiding malware alert and blockchain-contract loader behaviour indicate injected malicious code distributing a loader.

Risk Factors (5)
EtherHiding malware exfiltration alert (CRITICAL) on a WordPress site
Injected blockchain contract/loader behaviour (Ethereum getDomain(), Polygon RPC)
Primary domain flagged as a malware loader
External resource host checkyoubrowse.codes flagged malicious by two feeds
Five eval()/Function() dynamic-code calls of uncertain provenance
Domain age information unavailable

Details

Page Title

Camere Hotel Senigallia - Lanterna Blu Marzocca

Scan Type

public

Domain Name Analysis

The domain 'affittacameresenigallia.it' uses the Italian country-code top-level domain (.it) with no subdomain. The registrable portion 'affittacameresenigallia' spans 23 characters split between 11 vowels and 12 consonants. Splitting it apart reveals 7 words: a, ff, it, taca, meres, eni, gallia. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://affittacameresenigallia.it

Page Load Overview

9.55s
Total Load Time
3.2 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:2,617 chars
Detector Agreement:100%

Website Classification

Primary Category

travel tourism55% confidence
Type: spa
Method: ml+structural

All Detected Categories

travel tourism
55%
corporate
35%
adult content
34%
entertainment media
28%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1184.33.1.147Italy
AS34081INCUBATEC GmbH - Srl
4142.251.127.95Google · CDNUnited States
AS15169Google LLC
4142.251.151.119Google · CDNUnited States
AS15169Google LLC
4142.251.155.4Google · CDNUnited States
AS15169Google LLC
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
4192.178.183.95Google · CDNUnited States
AS15169Google LLC
4142.251.155.119Google · CDNUnited States
AS15169Google LLC
4142.251.154.4Google · CDNUnited States
AS15169Google LLC
12329--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DF93D5B317CC063F6AA5CFC8A062A20DB57BD4D4EE914994F6FC425E97C9EA03522335

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:1vSF57uapoZg7P/g26NAoinJ3OrXvvkE3er9J6aXXf7qXLbk9fTcFb2aTwqHFF1j:QT7Xr6NAbwgCaXXf7qXLbk9fTcFb26wc

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:93538:QJlFYWcQjMgFgCGIACnHGAEMRRI4x0WAFWk0JMEIjAUQIGEkN8IFUkCoCKRYoBASwSWTJwQBOQI2g0KPIBqUAwAJAAFQhnEC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0cffff3d000000ff
Perceptual Hash:9a1299129d1b9f1f
Difference Hash:9c8471f1d9e9f993
Wavelet Hash:0cffff3f000000ff
Color Hash:#ac5393

Scan History

Scan history not available

Unable to load historical scan data