Security Report: www.lhemingway.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8e010143-75af-40b2-bfee-059b1fb000a9 Domain and IP registration (RDAP)/api/v1/rdap/8e010143-75af-40b2-bfee-059b1fb000a9How often this domain was scanned/api/v1/domain/stats/lhemingway.com Scan history for this domain/api/v1/domain/history/lhemingway.com?limit=15

This website contacted 34 IPs in 3 countries across 15 domains to perform 122 HTTP transactions. The main domain is lhemingway.com and was registered 10 years ago.

Submitted URL: https://www.lhemingway.com/

AI Security Verdict

High Risk

Confidence: 93%

Risk Score

Compromised legitimate restaurant site lhemingway.com now injects a ClickFix 'Cloudflare Human Verification' overlay that instructs Windows users to paste attacker commands into Terminal; CRITICAL YARA/IDS confirm malware delivery.

Risk Factors (5)

Injected ClickFix social-engineering overlay impersonating Cloudflare human verification

CRITICAL IR YARA match (ClickFix_WinX_Overlay_Kit) on the served HTML

CRITICAL IDS alerts for ClickFix domain contact and EtherHiding exfiltration

Lures visitors into pasting attacker-controlled commands into Windows Terminal (Win+X, Ctrl+V, Enter)

Third-party resources loaded from threat-intel flagged domains (norediam.com, browseid.codes)

Domain age information unavailable

Details

Page Title

Restaurant - Cocktails - Plage privée - Restaurant l'Hemingway - La Londe-les-Maures

Scan Type

public

Favicon Hash

MMH3: -1003278764

MD5: 41eadd644438c33321b6c42fd74a7da0

Domain Name Analysis

Domain 'www.lhemingway.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'www'. Count 10 characters in 'lhemingway' containing 3 vowels alongside 7 consonants. Breaking it apart gives 2 words: l, hemingway. The median word length lands at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

9.07s

Total Load Time

3.6 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:4,730 chars

Detector Agreement:80%

Website Classification

Primary Category

blog personal website65% confidence

Type: spa

Method: ml+structural

All Detected Categories

blog personal website

65%

adult content

62%

real estate property

51%

finance banking

48%

travel tourism

45%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
23	213.186.33.4	France	AS16276OVH SAS
3	142.251.14.95Google · CDN	United States	AS15169Google LLC
3	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
3	13.33.187.2Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
3	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	142.250.154.138Google · CDN	United States	AS15169Google LLC
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
3	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	108.138.26.38Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
122	34	-	-