Security Report: seacostruzionieristrutturazioni.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f473882d-7337-4106-bcfc-4e5bee7db6dc Domain and IP registration (RDAP)/api/v1/rdap/f473882d-7337-4106-bcfc-4e5bee7db6dcHow often this domain was scanned/api/v1/domain/stats/seacostruzionieristrutturazioni.com Scan history for this domain/api/v1/domain/history/seacostruzionieristrutturazioni.com?limit=15

This website contacted 30 IPs in 4 countries across 19 domains to perform 126 HTTP transactions. The main domain is seacostruzionieristrutturazioni.com and was registered 7 years ago.

Submitted URL: https://seacostruzionieristrutturazioni.com

Effective URL:

https://www.seacostruzionieristrutturazioni.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Real construction firm's WordPress site has been compromised: obfuscated EtherHiding loader pulls a next-stage payload from BSC testnet contracts, with 19 critical malware IDS alerts and a fake CAPTCHA that tricks visitors into pasting commands into PowerShell.

Risk Factors (5)

Confirmed EtherHiding loader in page scripts with hidden threat-feed hosts

Nineteen CRITICAL IDS malware alerts on live network traffic

ClickFix-style fake CAPTCHA instructing visitors to paste commands into PowerShell

Legitimate WordPress/Divi construction-company page apparently compromised to distribute malware

Obfuscated JavaScript with eval() obfuscating third-party blockchain RPC fetches

Domain age information unavailable

Details

Page Title

SEA Costruzioni | costruzioni e ristrutturazioni edili

Scan Type

public

Favicon Hash

MMH3: 1440045471

MD5: 3231427386a4173e6d7c85730cd77af0

Domain Name Analysis

The domain name 'seacostruzionieristrutturazioni.com' uses the commercial generic top-level domain (.com) and has no subdomain. The second-level label 'seacostruzionieristrutturazioni' is 31 characters long containing 15 vowels alongside 16 consonants. Word splitting yields ten words: sea, cost, ru, zion, i, eri, strut, tura, zion, i. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

costui SGA COSTRUZIONI Informativa Noi e terze parti selezionate utilizziamo cookie o tecnologie simili per finalità tecniche e, con il tuo consenso, anche per altre finalità come specificato nell...

Page Load Overview

10.22s

Total Load Time

18.1 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:4,345 chars

Detector Agreement:75%

Website Classification

Primary Category

documentation technical69% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

69%

technology software

35%

news/blog

20%

Detected Features

Articles

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
10	89.46.110.8	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
4	185.152.64.17Datacamp · CDN	Prague, Prague, Czech Republic	AS60068Datacamp Limited
4	142.251.110.95Google · CDN	United States	AS15169Google LLC
4	172.217.116.4Google · CDN	United States	AS15169Google LLC
4	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
4	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
4	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
126	30	-	-