Security Scan Report: www.klima-celje.com

Redirected to:
https://www.klima-celje.si/?lang=de
Site favicon
Submitted: Completed: publiccompleted
This website contacted 4 IPs in 2 countries across 4 domains to perform 64 HTTP transactions. The main domain is klima-celje.com and was registered 1 year 1 month ago.

Submitted URL: https://www.klima-celje.com

Effective URL:
https://www.klima-celje.si/?lang=de
Redirected

AI Security Verdict

Moderate Risk

Confidence: 55%

5
Risk Score

Page content is a legitimate self-branded Klima Celje corporate site with no forms or code-level malice, but the primary/entry domain carries an unverified single-source formbook malware indicator, warranting caution.

Risk Factors (1)
Single-source, unverified content-malware (formbook) report against the primary/entry domain — a concrete signal that overrides the clean page content per escalation policy
Safety Factors (5)
SELF-BRANDING: title/meta match the domain — no impersonation of another entity
No credential, login, or payment forms (0 forms, 0 password fields, 0 payment fields)
No JavaScript malware patterns / hunting-rule hits, no network IDS alerts, no obfuscated JS or credential exfiltration
Content is a plausible long-standing industrial ventilation company (Slovenia) with references and product programs
Established domain (9812 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Klima Celje, Industrija aerotermičnih naprav, d.d.

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'www.klima-celje.com' is registered, featuring subdomain 'www'. Count 11 characters in 'klima-celje' with four vowels and six consonants; bonus characters include one hyphen. Breaking it apart gives 3 words: k, lima, celje. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

&$) sinacele Untemelien —Produkcion program Montage & Diestleisungen —-Referenzen Kontakte. ~=—- News Gesch-bedingungen ~ Serienausrustung Fans Ubrige Ausriisting ZADNJE NOVICE UNSERE KUNDEN MEINUNG...

Page Load Overview

15.71s
Total Load Time
2.2 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de-DE
Text Length:1,426 chars
Detector Agreement:33%

Website Classification

Primary Category

corporate business77% confidence
Type: spa
Method: ml+structural

All Detected Categories

corporate business
77%
social media network
58%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16212.44.112.106Slovenia
AS43128Webtasy, d.o.o.
16185.69.149.103Slovenia
AS59834Hitrost.com Internet Storitve d.o.o.
16142.251.14.95Google · CDNUnited States
AS15169Google LLC
16142.251.110.94Google · CDNUnited States
AS15169Google LLC
644--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16671A7B327695C6F22B640FBFAAB9F0ADA56881712C1D435E8FD25472C75D6482B0C84

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

48:b8e8NoNv+C5EsGwEKKVKSc7JbUIyUI9HE5aw0ftS636J0oCYIvkkk2SmMUmlmMUi:b8nNoNmC5EsGwE5VvkIs0ftw0EafiVtJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3691:ASAIsBQCAQQAUB0BQAQJkHgAAAEIBEIEAAAIATYAgpgAAEAgAIAwAhBDgCAAJCAlQQkIAggAFAIAEGApBgMIkCA4ApAYAkBx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00080818ffffff
Perceptual Hash:890df6f60f83b20b
Difference Hash:34b6d3f3e22a2214
Wavelet Hash:7e00000808ffffff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data