Security Report: beshotelsanpellegrinoterme.it - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1989754c-4575-4b71-979b-faf51313f73b Domain and IP registration (RDAP)/api/v1/rdap/1989754c-4575-4b71-979b-faf51313f73bHow often this domain was scanned/api/v1/domain/stats/beshotelsanpellegrinoterme.it Scan history for this domain/api/v1/domain/history/beshotelsanpellegrinoterme.it?limit=15

This website contacted 14 IPs in 3 countries across 11 domains to perform 134 HTTP transactions. The main domain is beshotelsanpellegrinoterme.it and was registered 3 years 8 months ago.

Submitted URL: https://beshotelsanpellegrinoterme.it

Effective URL:

https://www.beshotelsanpellegrinoterme.it/

Redirected

AI Security Verdict

High Risk

Confidence: 90%

Risk Score

Established hotel site appears compromised: an injected ClickFix 'Human Verification' overlay (Win+X → Terminal paste) plus CRITICAL EtherHiding/blockchain-RPC IDS alerts and malware threat-intel on the primary domain. Do not follow its on-screen instructions.

Risk Factors (5)

Known malicious ClickFix (Win+X/Terminal) kit with fake Cloudflare 'Human Verification' overlay injected into the page

CRITICAL YARA rule ClickFix_WinX_Overlay_Kit matched in page HTML (roster-anchored, analyst-vetted)

Five CRITICAL IDS 'ET MALWARE EtherHiding Exfil M2' alerts — blockchain-based payload/exfiltration infrastructure

Page scripts contact blockchain RPC nodes (EtherHiding/wallet-drainer-style channel) despite a hotel-booking site having no reason to

Primary domain reported as malware ('clearfake', 'unknown loader') by multiple threat-intel feeds

Domain age information unavailable

Details

Page Title

Bes Hotel San Pellegrino Terme – Bes Hotel San Pellegrino Terme

Scan Type

public

Favicon Hash

MMH3: 1182626638

MD5: b6c993904b115bda2f5edd7ff8fb7d27

Domain Name Analysis

The domain 'beshotelsanpellegrinoterme.it' uses the Italian country-code top-level domain (.it) while skipping any subdomain. Count 26 characters in 'beshotelsanpellegrinoterme' with 10 vowels and 16 consonants. Segmentation suggests 7 words: be, s, hotels, an, pellegrino, term, e. The median word length lands at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

6.03s

Total Load Time

6.2 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:4,888 chars

Detector Agreement:50%

Website Classification

Primary Category

adult content97% confidence

Type: spa

Method: ml+structural

All Detected Categories

adult content

97%

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
17	89.46.106.58	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
9	142.251.110.95Google · CDN	United States	AS15169Google LLC
9	3.33.248.193Aws · CLOUD	United States	AS16509Amazon.com, Inc.
9	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
9	142.251.14.94Google · CDN	United States	AS15169Google LLC
9	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
9	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
134	14	-	-