Security Scan Report: cfmcardaio.it

Redirected to:
https://www.google.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 15 IPs in 2 countries across 7 domains to perform 39 HTTP transactions. The main domain is cfmcardaio.it and was registered 21 years ago.

Submitted URL: https://cfmcardaio.it/

Effective URL:
https://www.google.com/
Redirected

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Capture entered on cfmcardaio.it (phishing feed hit, single-source) and redirected to Google; a HIGH IDS phishing-redirect alert flags the chain, though the final page itself is genuine Google with no credential forms.

Risk Factors (4)
HIGH IDS phishing alert indicating a credential-theft redirect page
Entry domain flagged as phishing in a threat-intel feed (single-source, unverified)
Abrupt cross-domain redirect from an unranked .it domain to Google, consistent with a redirect-lure/cloaking pattern
Use of an anonymizing redirector (href.li) in the redirect chain
Domain age information unavailable

Details

Page Title

Google

Scan Type

public

Domain Name Analysis

Within the Italian country-code top-level domain (.it), 'cfmcardaio.it' is registered while skipping any subdomain. The registrable portion 'cfmcardaio' spans 10 characters with four vowels and 6 consonants. Tokenizing the label suggests three words: cfm, card, aio. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cfmcardaio.it/

Page Load Overview

2.00s
Total Load Time
995 KB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:4,005 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content63% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
63%
government public service
37%
social media network
29%
blog personal website
27%
e-commerce shopping
25%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11188.213.166.207Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
2192.0.78.26San Francisco, California, United States
AS2635Automattic, Inc
2142.251.157.119Google · CDNUnited States
AS15169Google LLC
2142.251.127.94Google · CDNUnited States
AS15169Google LLC
2142.251.14.95Google · CDNUnited States
AS15169Google LLC
2142.251.156.7Google · CDNUnited States
AS15169Google LLC
2192.0.78.27San Francisco, California, United States
AS2635Automattic, Inc
2142.251.154.119Google · CDNUnited States
AS15169Google LLC
2142.251.151.119Google · CDNUnited States
AS15169Google LLC
2142.251.155.119Google · CDNUnited States
AS15169Google LLC
3915--

Detected Technologies2

PHPv8.4.27
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T189747C316310B83BB823DAA061BFAF4E3C75E15FDD0A82F8A592D531DED1DB2141669C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:JMTYaFz+40HGAUJZTfSTR2wEPWmtIA4MJZkb:JMTYaX0HGAUJZziR2T+MIXMJZg

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:343358:AKGMKAdLmEAFMWEQEQQegTBLAAQrYDUIBFsIp5DBQAswoWaniQSAMiIEiYEQQoSAnAAWiAIeBoRDEUCGtjAhCmKCGSJYHQoh

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3c3c3c3c3c3c3c3c
Perceptual Hash:9bd9646464737466
Difference Hash:6869696969696969
Wavelet Hash:3c3c3c3c3c3c3c3c
Color Hash:#e06cd8

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data