ScanMalware.com

Security Scan Report: cafetitoespanol.it

Redirected to:
https://www.cafetitoespanol.it/
Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/b7dc321c-4360-4d04-ad01-7ce5899336f7Domain and IP registration (RDAP)/api/v1/rdap/b7dc321c-4360-4d04-ad01-7ce5899336f7How often this domain was scanned/api/v1/domain/stats/cafetitoespanol.itScan history for this domain/api/v1/domain/history/cafetitoespanol.it?limit=15
This website contacted 14 IPs in 4 countries across 9 domains to perform 63 HTTP transactions. The main domain is cafetitoespanol.it and was registered 4 years 5 months ago.

Submitted URL: https://cafetitoespanol.it

Effective URL:
https://www.cafetitoespanol.it/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 85%

9
Risk Score

Malware Indicators of Compromise (ClearFake) plus blockchain testnet RPC traffic in a WordPress language-course site indicate a compromised page distributing wallet-drainer malware; do not interact.

Risk Factors (4)
Multi-source Threat Intelligence Indicators of Compromise naming the primary domain as 'clearfake' malware
Secondary single-source malware indicator ('unknown loader') on the apex domain
Page scripts contact blockchain testnet RPC endpoints — a typical pattern for wallet-drainer / ClearFake infrastructure
Socially-normal content masking off-content malicious script behavior (likely compromised WordPress site)
Domain age information unavailable

Details

Page Title

HOME - Cafetito espanol

Scan Type

public

Domain Name Analysis

You're looking at domain 'cafetitoespanol.it' on the Italian country-code top-level domain (.it). The second-level label 'cafetitoespanol' is 15 characters long with seven vowels and eight consonants. Tokenizing the label suggests 3 words: cafeti, to, espanol. The median word length lands at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cafetitoespanol.it

Page Load Overview

4.85s
Total Load Time
7.5 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:15,698 chars
Detector Agreement:100%

Website Classification

Primary Category

news/blog70% confidence
Type: webapp
Method: structural

All Detected Categories

news/blog
70%

Detected Features

Search
Articles
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1189.46.107.253Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
4185.111.111.156Frankfurt am Main, Hesse, Germany
AS212238Datacamp Limited
4142.251.20.95Google · CDNUnited States
AS15169Google LLC
4185.152.64.17Datacamp · CDNPrague, Prague, Czech Republic
AS60068Datacamp Limited
415.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
43.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
415.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
452.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
6314--

Detected Technologies13

X-UA-Compatible
100%
WordPressv7.1.3
100%
Open-Graph-Protocolvarticle
100%
MetaGenerator
100%
JQueryv3.7.1
100%
Google-AnalyticsvUniversal
100%
PHP
50%
MySQL
50%
HTTP/3
40%
Aruba.it
40%
iubenda
20%
Google Analytics
20%
DataTables
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T197D43B0FF7B53536316302847CB26328B39FE067E74609E1F8A5D6644B85E93331A66E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:fl4keyEJHfcCoMTzOBgMTiC22XYHrY/B8YtudDVCQPWZAAcj2lr8gvip4/Ts1mqT:fl4keD0CohBgMO92ltEDVCQPWZAAcj2Q

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:612696:kEMGCvwJpEgdiJAGIuJQdSDCIAAFAJUEANIDAKB4bAAgpANoLJEITRBwahYuBASqih9AAXohyBCDCLDYk1i1KJUlD0QEmWsA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffffffffdf8081
Perceptual Hash:b887609f4b65926d
Difference Hash:d3cc8e413b3d060f
Wavelet Hash:3366ffbc8d8f8080
Color Hash:#311f93

Other Hashes

Crop Resistant:01c4d0dca4e4d805,d3cc8e413b3d060f

Scan History

Scan history not available

Unable to load historical scan data