A public hotel website has been named in a threat-intelligence record, but the technical evidence stops at an unverified allegation and an opaque 64-character hash.