Security Report: belleroomstudios.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5f9ff6ee-05b5-4373-b845-7a1945bf34b0 Domain and IP registration (RDAP)/api/v1/rdap/5f9ff6ee-05b5-4373-b845-7a1945bf34b0How often this domain was scanned/api/v1/domain/stats/belleroomstudios.com Scan history for this domain/api/v1/domain/history/belleroomstudios.com?limit=15

This website contacted 25 IPs in 2 countries across 12 domains to perform 208 HTTP transactions. The main domain is belleroomstudios.com and was registered 1 year 7 months ago.

Submitted URL: https://belleroomstudios.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Genuine-looking event-rental site compromised with an IClickFix EtherHiding loader: obfuscated script pulls a next stage from an Ethereum Sepolia contract, confirmed by CRITICAL IDS and kit-roster match. Avoid; do not execute page scripts.

Risk Factors (5)

EtherHiding / ClickFix malware loader injected into the page (hunting rule + kit roster match)

CRITICAL IDS alert for EtherHiding exfiltration

Obfuscated script that reads a smart-contract address on the Ethereum Sepolia testnet to fetch a further payload

Obfuscated script hides known-bad RPC hosts (0xrpc.io, 1rpc.io, gateway.tenderly.co)

Content-malware threat-intel match on the primary domain and on a loaded third-party domain

Domain age information unavailable

Details

Page Title

Home | Belleroom Studios

Scan Type

public

Favicon Hash

MMH3: -591545980

MD5: 65e5dd3e4f76ced110e28fce8f0b970d

Domain Name Analysis

You're looking at domain 'belleroomstudios.com' on the commercial generic top-level domain (.com). The registrable portion 'belleroomstudios' spans 16 characters split between seven vowels and 9 consonants. Tokenizing the label suggests three words: belle, room, studios. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Home How it Works Event Rentals Mobile Cart Options Add-Ons Service Area About Contact Gallery © Grout Rentals

Page Load Overview

2.74s

Total Load Time

12.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-CA

Text Length:6,897 chars

Detector Agreement:85%

All Detected Languages

🇺🇸en(100%)🇷🇴ro(0%)

Website Classification

Primary Category

entertainment media39% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

entertainment media

39%

corporate

35%

social media network

30%

news/blog

20%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
149	216.128.183.35	Toronto, Ontario, Canada	AS20473The Constant Company, LLC
20	172.217.113.4Google · CDN	United States	AS15169Google LLC
14	142.251.150.119Google · CDN	United States	AS15169Google LLC
10	142.251.14.94Google · CDN	United States	AS15169Google LLC
8	142.251.110.95Google · CDN	United States	AS15169Google LLC
8	13.33.187.28Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
8	142.250.154.100Google · CDN	United States	AS15169Google LLC
8	142.251.157.119Google · CDN	United States	AS15169Google LLC
8	142.251.110.120Google · CDN	United States	AS15169Google LLC
8	172.217.118.4Google · CDN	United States	AS15169Google LLC
208	25	-	-