Security Scan Report: kaleidoterrace.it

Redirected to:
https://www.kaleidoterrace.it/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 3 countries across 6 domains to perform 122 HTTP transactions. The main domain is kaleidoterrace.it and was registered 3 years 6 months ago.

Submitted URL: https://kaleidoterrace.it

Effective URL:
https://www.kaleidoterrace.it/
Redirected

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Legitimate-looking Italian restaurant domain whose primary host is flagged as ClearFake malware by two independent feeds, with unexplained blockchain RPC fetches; site is likely compromised and serving injected malware.

Risk Factors (3)
Content-malware threat intelligence match (ClearFake) on the primary domain, multi-feed corroborated
Additional 'unknown loader' malware indicators on the same registrable domain
Silent blockchain RPC fetch activity (testnet BSC endpoints) inconsistent with the visible restaurant content — classic compromised-site script injection pattern
Domain age information unavailable

Details

Page Title

kaleidoterrace.it – Ortigia terrace experience

Scan Type

public

Domain Name Analysis

The domain name 'kaleidoterrace.it' uses the Italian country-code top-level domain (.it) with no subdomain. Its registrable label 'kaleidoterrace' stretches across 14 characters holding seven vowels versus seven consonants. Breaking it apart gives three words: kale, ido, terrace. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

oe OD NN ONT = ORTIGIA = ‘enuti in Orti igia siamo lieti di accogliervi in VY LA KALEIDO “ORTIGIA TERRACE EXPERIENCE)

Page Load Overview

5.07s
Total Load Time
9.1 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:2,541 chars
Detector Agreement:50%

Website Classification

Primary Category

real estate property84% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
84%
adult content
83%
blog personal website
77%
government public service
76%
travel tourism
75%

Detected Features

OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1246.30.213.138Copenhagen, Capital Region, Denmark
AS51468One.com A/S
1092.123.104.45Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
10142.251.13.95Google · CDNUnited States
AS15169Google LLC
1015.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
103.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1035.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
10104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
103.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
10172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
12212--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T11C447E72789D4955212F43E9E062A31CA0DFA697C6039AF5F3FC04BCB3E5CE121976A4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:zkemGltEWPCH8MUnYMjsbHlybEOw2A1r9zB79UW+yWDjIMKlD+30i2WK9oN+hVeq:ttEWPI8M8YMU0EkA1r9zB79UW+tiP

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:273075:jCQWGJIA1yAkIJKAIxJjSEdYgsLwAENFEBVkMQeOfFA2SoCFAysgsSAAABQKgAA0CBUgCFJSAxEJhDAkAKrBSEKlAQsgQpIY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:011919011919013d
Perceptual Hash:8866d966d966d926
Difference Hash:21313111313111b3
Wavelet Hash:ff199981999981b9
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data