Security Scan Report: kraftpropack.com

Submitted: Completed: publiccompleted
This website contacted 9 IPs in 1 country across 2 domains to perform 82 HTTP transactions. The main domain is kraftpropack.com and was registered 4 years 9 months ago.

Submitted URL: https://kraftpropack.com

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Legitimate-looking packaging company site whose scripts carry a ClearFake-style EtherHiding loader and hidden blockchain hosts — likely a compromised site serving malware to visitors.

Risk Factors (4)
ClearFake malware campaign indicator on the primary domain
EtherHiding: next-stage payload address resolved from a blockchain contract
Obfuscated script hiding known-attacker and malware-linked blockchain hosts
Blockchain RPC connections embedded in a page that has no legitimate Web3 purpose
Domain age information unavailable

Details

Page Title

Kraft Propack

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'kraftpropack.com' is registered and has no subdomain. The second-level label 'kraftpropack' is 12 characters long containing 3 vowels alongside nine consonants. Tokenizing the label suggests three words: kraft, pro, pack. Median word length comes out to four characters. No strong language cues emerged from the frequency lists.

Screenshot

kraft propack Home OurCompany Packaging Overview v Resources v Contact taking care of your product I FEED STACKER Bun eo =. “yy a) * w N Best Quality On Time Delivery Various Departments

Page Load Overview

9.77s
Total Load Time
32.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,712 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business69% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

corporate business
69%
documentation technical
43%
government public service
41%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10162.214.80.94Phoenix, Arizona, United States
AS31898Oracle Corporation
9142.251.110.95Google · CDNUnited States
AS15169Google LLC
915.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
915.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
9142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
952.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
9104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
9142.251.20.95Google · CDNUnited States
AS15169Google LLC
829--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T174547DA6B58A247E153F459FB08F762CF86D82C0C70265E1F1FD933492EDEE6216620D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:4YVMkrQO6Q4rtwucAAZCAg8avkbZ/WRYVCuiL44M7mlzqaP7xXBnir3q6Cd6bM4:U9cFpdbZ/WRYVCujwzqC4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:284186:J4wEAgAMBAISBQWMRH8RGZGgkVYE+gAjwCQAMsBDlAElEUiAAMBERAAELRZpACWShsgJjInEYk4YSQCQGBtNLQAAHInyInIy

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfc3c3c383c3ffff
Perceptual Hash:bc3d929259963c69
Difference Hash:36361717332f2d2a
Wavelet Hash:9f8383838383f7c3
Color Hash:N/A

Other Hashes

Crop Resistant:36361717332f2d2a

Scan History

Scan history not available

Unable to load historical scan data