Security Report: solevento.eu - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f09d0411-a8ed-4185-b19d-fdb2a8158f64 Domain and IP registration (RDAP)/api/v1/rdap/f09d0411-a8ed-4185-b19d-fdb2a8158f64How often this domain was scanned/api/v1/domain/stats/solevento.eu Scan history for this domain/api/v1/domain/history/solevento.eu?limit=15

This website contacted 30 IPs in 4 countries across 24 domains to perform 142 HTTP transactions. The main domain is solevento.eu.

Submitted URL: https://solevento.eu

Effective URL:

https://www.solevento.eu/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate Italian solar company site compromised and injected with ClickFix malware kit: fake Cloudflare 'Human Verification' overlay plus Ethereum-blockchain (EtherHiding) loader, confirmed by CRITICAL YARA and IDS alerts. Do not follow its Win+X/Terminal instructions.

Risk Factors (5)

Injected ClickFix 'Human Verification' social-engineering overlay impersonating Cloudflare

Malicious obfuscated JavaScript hidden on a compromised WordPress site

EtherHiding loader fetching its payload address from a blockchain contract

Multiple CRITICAL malicious-network IDS alerts (exploit kit, EtherHiding exfiltration, ClickFix domains)

Page text instructs visitors to open Windows Terminal and paste arbitrary commands

Domain age information unavailable

Details

Page Title

Solevento - Il fotovoltaico in Toscana

Scan Type

public

Favicon Hash

MMH3: -287489060

MD5: 8a5f678bb92a350a93075ee2cd3391f9

Domain Name Analysis

Domain 'solevento.eu' uses the .eu country-code top-level domain without a subdomain. The second-level label 'solevento' is 9 characters long split between four vowels and five consonants. Splitting it apart reveals three words: sol, even, to. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.98s

Total Load Time

8.2 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:6,227 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical93% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

93%

corporate business

82%

government public service

76%

education learning

69%

blog personal website

69%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
26	89.46.104.46	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
4	142.251.14.95Google · CDN	United States	AS15169Google LLC
4	142.250.154.97Google · CDN	United States	AS15169Google LLC
4	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
4	104.18.10.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.17.24.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
4	142.251.20.94Google · CDN	United States	AS15169Google LLC
142	30	-	-