Security Scan: B&B Fuorigrotta

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/784a473e-cac8-42f4-9979-eed1b94f1622 Domain and IP registration (RDAP)/api/v1/rdap/784a473e-cac8-42f4-9979-eed1b94f1622How often this domain was scanned/api/v1/domain/stats/bebfuorigrotta.com Scan history for this domain/api/v1/domain/history/bebfuorigrotta.com?limit=15

This website contacted 10 IPs in 3 countries across 12 domains to perform 80 HTTP transactions. The main domain is bebfuorigrotta.com and was registered 2 years 9 months ago.

Submitted URL: https://bebfuorigrotta.com

Effective URL:

https://www.bebfuorigrotta.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised B&B site carrying two CRITICAL injected kits — ErrTraffic/Exvicy WordPress loader and a fake Cloudflare ClickFix 'Human Verification' overlay that tells visitors to run Terminal commands. Do not visit or follow its instructions.

Risk Factors (5)

Injected ClickFix 'Human Verification' overlay instructing visitors to open Terminal and paste clipboard content (executes attacker PowerShell)

Injected ErrTraffic/Exvicy obfuscated WordPress loader (base64 blob XOR-decoded then executed via Function constructor)

Critical network IDS alerts for ClickFix domains and EtherHiding exfiltration

Page scripts communicate with blockchain RPC nodes used for EtherHiding-style payload retrieval

Legitimate-looking Italian B&B content used as a compromised front (404-day-old domain) to hide the injection

Domain age information unavailable

Details

Page Title

B&B Fuorigrotta

Scan Type

public

Favicon Hash

MMH3: -1883504280

MD5: 90f3e907fc44888a8e1192dd79edce73

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'bebfuorigrotta.com' is registered without a subdomain. The registrable portion 'bebfuorigrotta' spans 14 characters with six vowels and eight consonants. Breaking it apart gives six words: be, b, fu, orig, rot, ta. The median word length lands at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.25s

Total Load Time

3.3 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:5,498 chars

Detector Agreement:67%

Website Classification

Primary Category

blog personal website100% confidence

Type: spa

Method: ml+structural

All Detected Categories

blog personal website

100%

real estate property

99%

government public service

99%

technology software

99%

travel tourism

98%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	89.46.106.20	Arezzo, Tuscany, Italy	AS31034Aruba S.p.A.
8	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
8	132.145.155.63Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
8	142.251.13.95Google · CDN	United States	AS15169Google LLC
8	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
8	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	192.178.183.94Google · CDN	United States	AS15169Google LLC
8	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
8	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
80	10	-	-