Security Scan Report: alphacaesar.it

Redirected to:
https://www.alphacaesar.it/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 24 IPs in 2 countries across 9 domains to perform 135 HTTP transactions. The main domain is alphacaesar.it and was registered 16 years ago.

Submitted URL: https://alphacaesar.it

Effective URL:
https://www.alphacaesar.it/
Redirected

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Legitimate 16-year-old Italian engineering firm's WordPress site appears compromised: ClearFake malware is reported on the primary domain and page scripts fetch BSC testnet RPC endpoints, a known loader pattern. Do not interact.

Risk Factors (3)
Primary domain matches a multi-source malware indicator (ClearFake)
Unexplained cross-origin connections to Binance Smart Chain testnet RPC nodes from page scripts — a known malware loader pattern
Site appears to be WordPress with injected scripts inconsistent with its business content
Domain age information unavailable

Details

Page Title

Alpha Caesar Srl | Società Italiana di Ingegneria

Scan Type

public

Domain Name Analysis

The domain 'alphacaesar.it' uses the Italian country-code top-level domain (.it) with no subdomain. The registrable portion 'alphacaesar' spans 11 characters holding five vowels versus 6 consonants. Tokenizing the label suggests two words: alpha, caesar. Median word length comes out to 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://alphacaesar.it

Page Load Overview

6.80s
Total Load Time
11.1 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:2,844 chars
Detector Agreement:75%

Website Classification

Primary Category

news/blog40% confidence
Type: spa
Method: structural

All Detected Categories

news/blog
40%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2089.46.110.73Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
5192.178.183.95Google · CDNUnited States
AS15169Google LLC
53.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
535.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
53.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
515.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
5192.178.183.94Google · CDNUnited States
AS15169Google LLC
13524--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T110541A6F9771757A325383C9FC65EB0CE0ADE207DE8A85C0B6B881D897C19E2053369D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:ATg9CH3yE80DcTPpFwWQXBHUYEiQF93G3jcXzFUwtDRLLMza3qvmm3ItOh7XFjR5:FOfw1eBCW3

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:280193:CieYEWFkwmhAYuCBRAoABgQg4tIIAJRoZCEHEpAIHKwgJjCMwDrgERkHyRHxFAQesGHBFJMIQVVaMCPiSYBRgETgA4kUAQgi

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff000000000703
Perceptual Hash:a5daa1c3523c583f
Difference Hash:c8d2336d69565edf
Wavelet Hash:ffff0000243f2f07
Color Hash:#bf6440

Scan History

Scan history not available

Unable to load historical scan data