ScanMalware.com

Security Scan Report: albergobucaneve.it

Redirected to:
https://www.albergobucaneve.it/
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5460e41b-2043-43da-968e-b5d09c7f8d03Domain and IP registration (RDAP)/api/v1/rdap/5460e41b-2043-43da-968e-b5d09c7f8d03How often this domain was scanned/api/v1/domain/stats/albergobucaneve.itScan history for this domain/api/v1/domain/history/albergobucaneve.it?limit=15
This website contacted 22 IPs in 3 countries across 12 domains to perform 84 HTTP transactions. The main domain is albergobucaneve.it and was registered 26 years ago.

Submitted URL: https://albergobucaneve.it

Effective URL:
https://www.albergobucaneve.it/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate 26-year-old Italian hotel site compromised with an injected ClickFix 'Human Verification' overlay (Win+X Terminal PowerShell payload) and EtherHiding blockchain exfiltration. Do not paste or run anything; avoid the Terminal instructions.

Risk Factors (5)
Injected fake 'Human Verification' ClickFix overlay delivering a PowerShell/Terminal clipboard-execution payload
CRITICAL IDS alerts for EtherHiding exfiltration (network trojan)
Content-malware threat-intel match on the primary domain (clearfake, 2 corroborating feeds)
Blockchain RPC / Ethereum contract traffic from page scripts (EtherHiding-style obfuscation channel)
Roster-anchored malicious kit identification (clickfix-winx-overlay-2026-10)
Domain age information unavailable

Details

Page Title

Albergo Bucaneve - Hotel, Ristorante e Bar a Campodolcino - Alpe Motta

Scan Type

public

Domain Name Analysis

The domain name 'albergobucaneve.it' uses the Italian country-code top-level domain (.it) and has no subdomain. Its registrable label 'albergobucaneve' stretches across 15 characters split between seven vowels and eight consonants. It segments into 5 words: alb, ergo, bu, can, eve. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://albergobucaneve.it

Page Load Overview

7.01s
Total Load Time
5.1 MB
Total Size

Language Analysis

Primary Language

🇮🇹Italian
Code: it
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:it-IT
Text Length:4,600 chars
Detector Agreement:100%

Website Classification

Primary Category

travel tourism48% confidence
Type: spa
Method: ml+structural

All Detected Categories

travel tourism
48%
real estate property
43%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2189.46.108.59Arezzo, Tuscany, Italy
AS31034Aruba S.p.A.
3172.217.116.4Google · CDNUnited States
AS15169Google LLC
3142.251.20.97Google · CDNUnited States
AS15169Google LLC
3142.251.154.119Google · CDNUnited States
AS15169Google LLC
3152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
3142.251.127.95Google · CDNUnited States
AS15169Google LLC
3104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.14.94Google · CDNUnited States
AS15169Google LLC
3178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
3216.239.34.36Google · CDNUnited States
AS15169Google LLC
8422--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T18083C7B3464A683E002346C8B069B719F1E7D16BCB465D98F7FA52FDE3CEED10422685

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:V1v54x1TPqZKMG6/06SffKEwXeB+Y1LeemezMeOK0MK0quozXy+oDQJDbgXMeJeH:IdwXeB+auBTXJDbEo2gj/2EgqXucbRMW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:87705:AYSBQEQgaBWJKFAxSYQAuqAxUQqAc9gQAQ68AF0hAsZviBAQCWAMgELmoK8QvIQbUNA1ZhACEBIIZ4GIRNAKEhGgIhIBQXAB

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:07ffc3f9390181fd
Perceptual Hash:aab5b42ec33d0476
Difference Hash:6f0917a341690d49
Wavelet Hash:07ff81f1390181fd
Color Hash:#862d67

Other Hashes

Crop Resistant:b717361717e7475f,4a456d3226c7d604,3e2ce95e55d26455,6e0917a341690d49

Scan History

Scan history not available

Unable to load historical scan data