Security Report: bergrestaurant-polite.de - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/4d539d71-ece4-4237-b82a-d1f60b7e4443 Domain and IP registration (RDAP)/api/v1/rdap/4d539d71-ece4-4237-b82a-d1f60b7e4443How often this domain was scanned/api/v1/domain/stats/bergrestaurant-polite.de Scan history for this domain/api/v1/domain/history/bergrestaurant-polite.de?limit=15

This website contacted 4 IPs in 2 countries across 3 domains to perform 24 HTTP transactions. The main domain is bergrestaurant-polite.de.

Submitted URL: https://bergrestaurant-polite.de

AI Security Verdict

High Risk

Confidence: 90%

Risk Score

Legitimate 21-year-old restaurant site that has been compromised: injected ClearFake Polygon EtherHiding loader plus rival-kit cleanup script (2 YARA hits) and unrelated casino/SEO spam links. Do not browse on Windows; site owner should clean it.

Risk Factors (5)

ClearFake Polygon/EtherHiding loader injected into a compromised legitimate website (CRITICAL YARA)

ClearFake rival-kit cleanup script that strips other ClickFix kits, pins its own overlay and blocks navigation (HIGH YARA)

Analyst-vetted known malicious kit roster match (2 sightings, family clearfake-polygon-loader-2026-10)

HTML content tampered with unrelated gambling/adult spam headers and injected link farm on a restaurant page

Unranked third-party script host cafe-polite.de serving code to the page alongside the injected loader

Domain age information unavailable

Details

Page Title

Cafe-Polite – Bergrestaurant in Bad Hindelang im Allgäu

Scan Type

public

Domain Name Analysis

Within the German country-code top-level domain (.de), 'bergrestaurant-polite.de' is registered and has no subdomain. The registrable portion 'bergrestaurant-polite' spans 21 characters split between 8 vowels and twelve consonants; bonus characters include one hyphen. Segmentation suggests 3 words: berg, restaurant, polite. Median word length is 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.75s

Total Load Time

91 KB

Total Size

Language Analysis

Primary Language

🇩🇪German

Code: de

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:de

Text Length:4,346 chars

Detector Agreement:67%

Website Classification

Primary Category

adult content97% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

adult content

97%

gambling betting

96%

entertainment media

93%

news/blog

20%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	81.88.34.88	Germany	AS8648dogado GmbH
6	167.235.254.41	Falkenstein, Saxony, Germany	AS24940Hetzner Online GmbH
6	142.251.13.95Google · CDN	United States	AS15169Google LLC
6	142.251.110.95Google · CDN	United States	AS15169Google LLC
24	4	-	-