Security Scan Report: sunnysingh.uk

Site favicon
Submitted: Completed: publiccompleted
This website contacted 8 IPs in 2 countries across 7 domains to perform 68 HTTP transactions. The main domain is sunnysingh.uk and was registered 3 years 1 month ago.

Submitted URL: https://sunnysingh.uk/

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised WordPress page serving a ClickFix FakeCAPTCHA kit: copies a malicious msiexec command to the clipboard, loads a threat-intel-flagged resource and triggers a CRITICAL EtherHiding IDS alert. Do not paste or run anything.

Risk Factors (5)
Known ClickFix FakeCAPTCHA malware-delivery kit (msiexec LOLBin) staged on the page
Clipboard/copy-paste shell injection (pastejacking) presenting a fake CAPTCHA prompt
Malicious third-party resource nightflamevortex.top (exploit kit 'clearfake-1', 3 corroborating feeds)
CRITICAL IDS alert for EtherHiding exfiltration and HIGH alerts for *.top hostile traffic
Injected casino/SEO spam content and leaked server-side PHP code indicating a compromised site
Domain age information unavailable

Details

Page Title

Prank Captcha

Scan Type

public

Domain Name Analysis

The domain 'sunnysingh.uk' uses the United Kingdom country-code top-level domain (.uk) without a subdomain. The registrable portion 'sunnysingh' spans 10 characters containing 2 vowels alongside eight consonants. Tokenizing the label suggests 2 words: sunny, singh. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sunnysingh.uk/

Page Load Overview

2.77s
Total Load Time
831 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:25,872 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content87% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
87%
technology software
85%
entertainment media
71%
documentation technical
68%
healthcare medical
55%

Detected Features

Search
Comments
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.14.95Google · CDNUnited States
AS15169Google LLC
8104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.250.154.94Google · CDNUnited States
AS15169Google LLC
8146.19.24.104Poland
AS201814MEVSPACE sp. z o.o.
8188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.127.94Google · CDNUnited States
AS15169Google LLC
8142.251.20.94Google · CDNUnited States
AS15169Google LLC
688--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D49319B359A82379036347812177725EE73A84E79B40C8A4FC9DDC486FD0FA426727E9

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:ZB4i16bKy0pd9450reUIn8QLtK4VLGihcM1AvDNmCGswcVoBA3fB34qR/RBU:ry0pd94qpInRK4VLGi+M1AvDNmCGswcW

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:89306:RA2RhKJYlwEJsYCiFAlAgK4FCgLCEgPYDyEooAKAMjAA5SCfAaNOIBgsAqwfR5BACMbVY4CRpIg4DQhDkyYDAmIARS4SgCp9

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000002ffffff00
Perceptual Hash:d57f2ad52aaa2a90
Difference Hash:82a2a2a280828084
Wavelet Hash:2000007effffff00
Color Hash:#9387c5

Other Hashes

Crop Resistant:82a2a2a280828084

Scan History

Scan history not available

Unable to load historical scan data