Security Scan Report: brododigiuggiola.it

Site favicon
Submitted: Oct 9, 2026, 11:54:27 AMCompleted: Oct 9, 2026, 11:55:29 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate-looking Italian fashion blog whose domain and loaded resource carry malware IoCs and triggered CRITICAL EtherHiding/ClickFix IDS alerts — likely compromised and serving malware. Do not browse.

Risk Factors (5)
CRITICAL IDS malware/C2 alerts (EtherHiding, ClickFix) tied to the loaded network traffic
Malware threat-intelligence match on the primary domain (unknown loader)
Multi-feed malware IoC for third-party domain zvh4.com contacted by the page
Blockchain RPC endpoints (0xrpc.io, 1rpc.io) observed — typical of EtherHiding payload retrieval
Compromised legitimately-aged blog likely serving malicious JavaScript to visitors
Domain age information unavailable

Details

Page Title

home – anima piumata

Scan Type

public

Domain Name Analysis

You're looking at domain 'brododigiuggiola.it' on the Italian country-code top-level domain (.it) and has no subdomain. The second-level label 'brododigiuggiola' is 16 characters long containing eight vowels alongside 8 consonants. Tokenizing the label suggests seven words: bro, do, dig, i, ug, gi, ola. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://brododigiuggiola.it

Page Load Overview

4.97s
Total Load Time
5.8 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:4,139 chars
Detector Agreement:50%

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1279.98.40.52Verona, Veneto, Italy
AS43989Ehinet Srl
11142.251.14.95Google · CDNUnited States
AS15169Google LLC
11104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11172.67.71.176Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11142.251.14.94Google · CDNUnited States
AS15169Google LLC
11157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
11157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
11104.17.24.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.26.8.223Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13312--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C393F937D35C097F17AB8ED591653E0CA19EA562C65606F963F902D8EBCCFA21AF3010

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:mF7d9JjGypnvGP0C+qmRCsHoJ7XN6TPeJMiGlfAvNhZwIJRVnPg6HX1MwrKCjN3g:mRdX/FGP0C+qsHoJ7XN6TPeJMiGlkX/K

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:95276:EqDAArFtIVvkwGQbDQBASDvqGHKkGSQEhQkEIcERCSMl4WMiCUIAQCQgCRIYimlQKAdGYhOidDDAIIV20cLyAMBBFBoAgJBW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0101011919010101
Perceptual Hash:885577dd88aa22dd
Difference Hash:01314db3b34d3101
Wavelet Hash:03030f1f3f2f0303
Color Hash:#865c2d

Scan History

Scan history not available

Unable to load historical scan data