Security Scan Report: brunellagroup.it

Redirected to:
https://www.brunellagroup.it/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 3 countries across 7 domains to perform 92 HTTP transactions. The main domain is brunellagroup.it and was registered 25 years ago.

Submitted URL: https://brunellagroup.it

Effective URL:
https://www.brunellagroup.it/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

Legitimate Italian bathroom retailer compromised: page injects a ClickFix fake 'Human Verification' overlay (Win+X → Terminal paste), with CRITICAL EtherHiding exfiltration IDS alerts and multi-source 'clearfake' malware threat-intel on the primary domain. Do not follow the on-screen instructions.

Risk Factors (6)
Roster-anchored ClickFix (Win+X → Terminal) fake 'Human Verification' overlay injected into page (CRITICAL phishing kit)
CRITICAL IDS alerts: ET MALWARE EtherHiding Exfil M2 (x2)
Outbound blockchain RPC connections used as malware C2/exfiltration channel
Multi-source content-malware threat-intel match on the primary domain (clearfake)
Third-party malicious resource host checkyoubrowse.codes loaded by the page
Page text instructs visitors to execute pasted terminal commands (social-engineering malware delivery)
Domain age information unavailable

Details

Page Title

Il Bagno Di Brunella

Scan Type

public

Domain Name Analysis

You're looking at domain 'brunellagroup.it' on the Italian country-code top-level domain (.it) while skipping any subdomain. Count 13 characters in 'brunellagroup' holding 5 vowels versus eight consonants. It segments into three words: brunel, la, group. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://brunellagroup.it

Page Load Overview

5.20s
Total Load Time
5.0 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:2,462 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network64% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
64%
corporate business
40%
corporate
35%

Detected Features

OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1789.46.109.39Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
15150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
15142.251.20.95Google · CDNUnited States
AS15169Google LLC
15142.251.14.94Google · CDNUnited States
AS15169Google LLC
15172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
15178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
926--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1BA459D9B4754872B63D046C58158301BABE4E95BE53528ADEFC3ACEBF85F483487C722

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:0MoGJQ8oOHL0ZPHnoLKpeAn7m5G+I0cbs5PZE5xYZHbU+Rk5AhfZe5ZvraqL3Qh:boc2ZP2UrytU+Rk5AhfZe5ZvraqL3y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1214992:AkWUAEkRQCiNklkEyIIEeECgoFegRASqVBB5BzmArwAgRiGhLUdKxQFGiBFAhEooABjoGo6CQQCKAAGSYqwAWjmRGIQRCXAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff7e7e7070700c00
Perceptual Hash:c097bbed6dc0c192
Difference Hash:0afcd4b6b6c6b89c
Wavelet Hash:ff7e7e7272700800
Color Hash:#d2c679

Scan History

Scan history not available

Unable to load historical scan data