Security Report: labottegadibottone.live - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ef16d2b4-7f89-4c18-9088-73c3dfa6c3c0 Domain and IP registration (RDAP)/api/v1/rdap/ef16d2b4-7f89-4c18-9088-73c3dfa6c3c0How often this domain was scanned/api/v1/domain/stats/labottegadibottone.live Scan history for this domain/api/v1/domain/history/labottegadibottone.live?limit=15

This website contacted 12 IPs in 2 countries across 10 domains to perform 103 HTTP transactions. The main domain is labottegadibottone.live and was registered 1 month ago.

Submitted URL: https://labottegadibottone.live

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised craft-shop site injected with a ClickFix fake 'human verification' overlay that pushes Windows visitors to run terminal commands, resolving its loader via Polygon smart contracts. Malware distribution — avoid.

Risk Factors (5)

Injected ClickFix Windows overlay instructing visitors to open Terminal and run commands (leads to infostealer/RAT execution)

Blockchain-based payload hosting (EtherHiding) used to evade takedown, with CRITICAL IDS malware exfiltration alerts

Content-malware indicators on scripts fetched by the page (javascript.skin, interseq.at, 'ek clearfake-1')

Credential form (username + password) present on a domain only 40 days old and unranked

Primary domain flagged as IClickFix in threat intelligence

Domain age information unavailable

Details

Page Title

La Bottega di Bottone | Fatto a Mano

Scan Type

public

Favicon Hash

MMH3: 437861775

MD5: c4baecf254cf9fb4f431bb12f4b26eb3

Domain Name Analysis

You're looking at domain 'labottegadibottone.live' on the .live top-level domain and has no subdomain. The core label 'labottegadibottone' covers 18 characters split between 8 vowels and 10 consonants. Splitting it apart reveals 6 words: lab, ott, eg, adi, botton, e. Expect 3 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.41s

Total Load Time

2.3 MB

Total Size

Language Analysis

Primary Language

🇮🇹Italian

Code: it

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:it-IT

Text Length:1,888 chars

Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence

Type: spa

Method: structural

All Detected Categories

No categories detected

Detected Features

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	142.251.14.95Google · CDN	United States	AS15169Google LLC
8	188.114.97.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	142.250.154.94Google · CDN	United States	AS15169Google LLC
8	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	104.21.85.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
103	12	-	-