Security Scan Report: semp-albania.com

Redirected to:
https://www.semp-albania.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 4 countries across 10 domains to perform 127 HTTP transactions. The main domain is semp-albania.com and was registered 5 years ago.

Submitted URL: https://semp-albania.com

Effective URL:
https://www.semp-albania.com/
Redirected

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Legitimate SEMP project site that appears COMPROMISED: ClearFake EtherHiding loader (hunting rule- and kit-roster-confirmed) plus a critical EtherHiding IDS alert. Visitors risk malware/ClickFix infection — avoid.

Risk Factors (5)
ClearFake blockchain-contract malware loader injected into the page (hunting rule + analyst-vetted kit roster)
EtherHiding C2 channel via polygon.drpc.org RPC domain
CRITICAL IDS malware/network-trojan alert (ET MALWARE EtherHiding Exfil M2)
Malicious third-party script hosts corroborated across 3 threat feeds
Indicators of Compromise on the primary domain ('unknown loader')
Domain age information unavailable

Details

Page Title

Home - SEMP

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'semp-albania.com' is registered while skipping any subdomain. Count 12 characters in 'semp-albania' split between five vowels and 6 consonants, plus one hyphen. Segmentation suggests three words: s, emp, albania. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Smart Energy Municipalities Project in Albania Home AboutUs- Newsy Pilot Municipalitiesy |Contact Us Smart Energy Municipalities Project in Albania Through the project of Smaart Energy Municipaliti...

Page Load Overview

8.06s
Total Load Time
4.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,256 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service74% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
74%
documentation technical
59%
adult content
51%
technology software
41%
download file sharing
40%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2289.46.110.38Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
7142.250.154.95Google · CDNUnited States
AS15169Google LLC
7142.251.154.119Google · CDNUnited States
AS15169Google LLC
7142.251.14.94Google · CDNUnited States
AS15169Google LLC
7142.251.155.120Google · CDNUnited States
AS15169Google LLC
7192.178.183.95Google · CDNUnited States
AS15169Google LLC
7142.251.151.119Google · CDNUnited States
AS15169Google LLC
7172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
794.23.162.163Saarbrücken, Saarland, Germany
AS16276OVH SAS
754.38.220.85France
AS16276OVH SAS
12716--

Detected Technologies5

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DDF32B7275594C36122B02CA942A768CA8BFEA73DA0695F8F1F7312C43D4DE6335236D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:xvMQaM6DHSxlrsmml49lqZrSdVti/Aa/N8THEqVp/d4Wd4md4dJG5Np2bd/OH3Lt:FqZyzEqVpB

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:166374:8qMluoMLDFURCIAUR6UIkSBJa8OA6AAgbE1FdN4Q/spRIVBAQgQRtSNEDg3AggBChQk8Aj1AUAAFCzQHFxiLmgQDiI5gAGhp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffff0000000000
Perceptual Hash:8eddbdac122438bc
Difference Hash:360013f5f56565cd
Wavelet Hash:ffffff7e00100100
Color Hash:06007000000

Scan History

Scan history not available

Unable to load historical scan data