Security Scan Report: agripiumacchinari.it

Site favicon
Submitted: Sep 13, 2026, 9:47:28 PMCompleted: Sep 13, 2026, 9:49:48 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Legitimate Italian agricultural-machinery business whose site is compromised, serving ClearFake/EtherHiding malware via injected blockchain RPC scripts — confirmed content-malware IoCs and CRITICAL IDS exfiltration alerts. Do not interact.

Risk Factors
ClearFake/EtherHiding malware infrastructure injected into the page
Exploit-kit domain loaded as a sub-resource (fingerprint-veri.info)
Blockchain RPC exfiltration traffic confirmed by network IDS
Multiple content-malware Indicators of Compromise on both the primary domain and loaded resources
Domain age information unavailable

Details

Page Title

▷ Agripiù Macchinari Agricoli - Vendita e Riparazione

Scan Type

public

Domain Name Analysis

The domain name 'agripiumacchinari.it' uses the Italian country-code top-level domain (.it). The registrable portion 'agripiumacchinari' spans 17 characters containing eight vowels alongside 9 consonants. Splitting it apart reveals 5 words: a, grip, iu, macchi, nari. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://agripiumacchinari.it

Page Load Overview

75.21s
Total Load Time
4.6 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:3,465 chars
Detector Agreement:80%

Website Classification

Primary Category

documentation technical74% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
74%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20185.111.111.155Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
9142.251.110.95Google · CDNUnited States
AS15169Google LLC
980.211.133.30Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
9185.152.64.17Datacamp · CDNPrague, Prague, Czech Republic
AS60068Datacamp Limited
9172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9104.18.10.59Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
9178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
9104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15516--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D11165C329098C37094372C9DA60F54C507E1248F4829C648DEE81163F88BC3AAADA94

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:h1utaoOvcM66l5jcsr/lDxta9LXzbDOXF9G:3BovA5jcsr/7sxbD6F8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1070:AoAAgAAgAAAAAQAAAAAAAAAAAQAAAQBAAAAAEAAAFIABAAABAEAAAIAAAAAABACAEAASAEACAAQAAUABAAACABIAAAAAACAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff001c1c08c3c3
Perceptual Hash:b8c2e59bb424d3e4
Difference Hash:0a51a13971330706
Wavelet Hash:ffff101c1c08c3c3
Color Hash:#503a78

Scan History

Scan history not available

Unable to load historical scan data