Security Report: bipbop-packaging.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/170248b8-d91a-43b9-a0bf-60aec930aab5 Domain and IP registration (RDAP)/api/v1/rdap/170248b8-d91a-43b9-a0bf-60aec930aab5 Certificate Transparency/api/v1/ct/bipbop-packaging.com How often this domain was scanned/api/v1/domain/stats/bipbop-packaging.com Scan history for this domain/api/v1/domain/history/bipbop-packaging.com?limit=15

This website contacted 32 IPs in 2 countries across 16 domains to perform 140 HTTP transactions. The main domain is bipbop-packaging.com and was registered 18 years ago.

Submitted URL: https://bipbop-packaging.com

AI Security Verdict

Confirmed Scam

Confidence: 95%

Risk Score

Malware-distribution page: primary domain flagged as ClearFake malware, CRITICAL EtherHiding/ClickFix IDS alerts, blockchain RPC C2, and an on-page fake CAPTCHA urging users to press Windows+X. Do not interact.

Risk Factors (5)

Malware-typed Indicators of Compromise match on the primary domain (clearfake) corroborated by 2 independent feeds

ClickFix fake-CAPTCHA / keyboard-instruction social engineering on the page

CRITICAL EtherHiding exfiltration IDS alerts

Connections to blockchain RPC endpoints used for blockchain-hosted malicious payloads

Third-party malicious resources loaded (interseq.at, checkyoubrowse.codes)

Domain age information unavailable

Details

Page Title

Emballages Personnalisés pour Restaurants | BipBop Packaging

Scan Type

public

Favicon Hash

MMH3: -750930119

MD5: 257941609b8738d11672e04e8f11c09a

Domain Name Analysis

The domain 'bipbop-packaging.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'bipbop-packaging' spans 16 characters containing 5 vowels alongside 10 consonants, along with one hyphen. Word splitting yields four words: b, ip, bop, packaging. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.45s

Total Load Time

8.6 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:7,982 chars

Detector Agreement:80%

Website Classification

Primary Category

healthcare medical74% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

74%

government public service

74%

adult content

72%

documentation technical

68%

social media network

66%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	72.167.209.68	Ashburn, Virginia, United States	AS398101GoDaddy.com, LLC
4	142.251.14.95Google · CDN	United States	AS15169Google LLC
4	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
4	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	18.66.112.121Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
4	142.251.151.119Google · CDN	United States	AS15169Google LLC
4	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
4	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
140	32	-	-