Security Report: bomhutchankhongorion.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/195e99ab-d3a8-4243-a3c2-a08d6ab83e29 Domain and IP registration (RDAP)/api/v1/rdap/195e99ab-d3a8-4243-a3c2-a08d6ab83e29How often this domain was scanned/api/v1/domain/stats/bomhutchankhongorion.com Scan history for this domain/api/v1/domain/history/bomhutchankhongorion.com?limit=15

This website contacted 17 IPs in 2 countries across 11 domains to perform 191 HTTP transactions. The main domain is bomhutchankhongorion.com and was registered 6 years ago.

Submitted URL: https://bomhutchankhongorion.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Compromised Vietnamese shop page serving a ClickFix Win+X/Terminal 'Human Verification' overlay (fake Cloudflare challenge), with EtherHiding blockchain-delivered payload; primary domain flagged as malware by two feeds.

Risk Factors (6)

Compromised site serving a Windows ClickFix (Win+X -> Terminal) malware-delivery overlay

Fake 'Human Verification' / Ray ID overlay impersonating a Cloudflare challenge

Primary domain listed as malware ('clearfake') by two independent feeds

EtherHiding abuse: ClickFix payload fetched via blockchain RPC / smart-contract infrastructure

Multiple CRITICAL Suricata malware/exfiltration alerts (EtherHiding Exfil M2, ClickFix domain in TLS SNI)

Credential capture form (password field) on the same page as the injected overlay

Domain age information unavailable

Details

Page Title

Bơm chân không Orion - Bơm hút chân không Orion

Scan Type

public

Favicon Hash

MMH3: 1047333848

MD5: 1e10e23a60aaa97b4d0f58db492f1a5e

Domain Name Analysis

The domain 'bomhutchankhongorion.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'bomhutchankhongorion' stretches across 20 characters holding 7 vowels versus 13 consonants. Segmentation suggests 5 words: bom, hutch, ank, hong, orion. Median word length comes out to 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

15.37s

Total Load Time

18.8 MB

Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese

Code: vi

Confidence:63%

Script:Unknown

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:14,210 chars

Detector Agreement:75%

Language mismatch: Declared as en-US but detected as vi

Website Classification

Primary Category

documentation technical92% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

92%

corporate business

55%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
15	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	142.251.13.95Google · CDN	United States	AS15169Google LLC
11	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
11	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
11	104.21.3.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	172.217.112.4Google · CDN	United States	AS15169Google LLC
11	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	142.251.14.94Google · CDN	United States	AS15169Google LLC
11	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
191	17	-	-