ScanMalware.com

Security Scan Report: www.comune.mompeo.ri.it

Redirected to: https://www.halleyweb.com/c057038/hh/index.php

Site favicon
Submitted: Nov 22, 2025, 9:20:48 AMCompleted: Nov 22, 2025, 9:22:12 AMpubliccompleted
Loading additional data...

Summary

This website contacted 49 IPs in 4 countries across 10 domains to perform 128 HTTP transactions. The main domain is halleyweb.com and was registered NaN years ago.

Submitted URL: https://www.comune.mompeo.ri.it/

Effective URL: https://www.halleyweb.com/c057038/hh/index.phpRedirected

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

High‑risk phishing site impersonating a municipal website

Risk Factors
Brand impersonation on a non‑official, unranked domain
Mismatched final URL (halleyweb.com) for a municipal website
Unranked domain combined with public‑sector branding
Low‑quality OCR text indicating possible spoofing
Domain age information unavailable

Details

Page Title

Comune di MOMPEO - Sito Istituzionale

Scan Type

public

Language

🇮🇹

Italian

(80% confidence)

Category

government public service

(86%)

Domain Information

The domain name 'www.comune.mompeo.ri.it' uses the Italian country-code top-level domain (.ri.it) and includes subdomain 'www.comune'. Count 6 characters in 'mompeo' with three vowels and three consonants. Tokenizing the label suggests 3 words: mom, pe, o. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.comune.mompeo.ri.it/

Page Load Overview

3.37s
Total Load Time
128
HTTP Requests
10
Domains
178.7 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:it
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:IT
Text Length:7,907 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service86% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
86%
adult content
29%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
105195.78.210.236Italy
AS3302Retelit Digital Services S.p.A.
32104.19.220.32United States
AS13335CLOUDFLARENET
8172.66.167.228United States
AS13335CLOUDFLARENET
491.134.34.33France
AS16276OVH SAS
313.32.121.34New York, New York, United States
AS16509AMAZON-02
291.134.60.148France
AS16276OVH SAS
2108.129.53.232Dublin, Leinster, Ireland
AS16509AMAZON-02
213.32.121.49New York, New York, United States
AS16509AMAZON-02
218.172.112.109United States
AS16509AMAZON-02
2104.16.79.73United States
AS13335CLOUDFLARENET
12849--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FD6397269AFA1593012381C0FD32EB187A674663D7071AE5F7ED832DAFCDD865C07286

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:j0MhCJgXC71SmkwA5vQs27g4uTCcRpvxboGpiUUFUUsQd/xpAndF5:jdQUD+8/kXpsWJWdF5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:71614:tWKihAAyW6KMuRIEEwjgGDEEUMQlAmhoUsjCIEJwACFFScroKgGgEORKAYIEOvgoCgYigaMoDGLHQQgBZDYFEBMnBi5ByFVC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000303838203c3c
Perceptual Hash:c774303919c6679b
Difference Hash:8793696173436971
Wavelet Hash:01013d3d7d397d3c
Color Hash:#c6d279

Other Hashes

Crop Resistant:b3b3b3b3b0b5b4b3,cb8541509809455b,06936c60724a6971

Scan History

Scan history not available

Unable to load historical scan data