ScanMalware.com

Security Scan Report: brandbunch.pk

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/24477d68-712e-4640-8038-0529dbd17fc1Domain and IP registration (RDAP)/api/v1/rdap/24477d68-712e-4640-8038-0529dbd17fc1How often this domain was scanned/api/v1/domain/stats/brandbunch.pkScan history for this domain/api/v1/domain/history/brandbunch.pk?limit=15
This website contacted 11 IPs in 3 countries across 11 domains to perform 42 HTTP transactions. The main domain is brandbunch.pk and was registered 6 years ago.

Submitted URL: https://brandbunch.pk

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised bedsheets site turned gambling-spam host and injected with the critical ClickFix 'Human Verification' kit: an EtherHiding loader pulls its next stage from a Polygon contract and pushes Windows visitors to run Terminal commands. Domain itself is threat-intel flagged as malware. Avoid entirely.

Risk Factors (7)
CRITICAL ClickFix phishing kit injected into the page (Win+R/Terminal social-engineering overlay)
Blockchain-based EtherHiding loader resolving next stage from a Polygon smart contract
Primary domain flagged as 'clearfake' malware by two corroborating threat feeds
Critical IDS alerts for EtherHiding exfiltration and ClickFix command-and-control domain contact
Obfuscated JavaScript concealing known-malicious hosts (campaigntracker.icu/run, trackerredirect.online, 1rpc.io)
Content hijacking: unrelated multi-language gambling SEO spam on a bedsheet e-commerce domain
Unranked third-party script host browse-codes-enter.beer serving active code
Domain age information unavailable

Details

Page Title

brandbunch.pk – best online bedsheets in Pakistan

Scan Type

public

Domain Name Analysis

The domain name 'brandbunch.pk' uses the Pakistani country-code top-level domain (.pk). The second-level label 'brandbunch' is 10 characters long with two vowels and 8 consonants. It segments into two words: brand, bunch. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://brandbunch.pk

Page Load Overview

2.11s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:7,472 chars
Detector Agreement:50%

Website Classification

Primary Category

entertainment media94% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
94%
gambling betting
91%
cryptocurrency blockchain
80%
technology software
52%
adult content
45%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1268.178.148.52United States
AS26496GoDaddy.com, LLC
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
3104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3185.92.183.208Riga, Riga, Latvia
AS56971Cgi Global Limited
3152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
3142.251.110.94Google · CDNUnited States
AS15169Google LLC
335.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
3178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
3157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
3142.251.127.84Google · CDNUnited States
AS15169Google LLC
4211--

Detected Technologies5

WordPressv7.1.3
100%
MetaGenerator
100%
PHP
50%
MySQL
50%
jQuery
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D1D3D773A380123A232BB3ACF191F72C55754523EA4E2AD5F2EE425BD5C5BE3107262D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:9Ct5d2nAltS2lAeT3ZvPypTRTYNFhPvtN6LCc7r1wqyvPgRmi:ma25Mb7r1wqyvPgEi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:141742:DWQWMpQLIBmB9LACNIIhYRkgpAcYQWAAAIuCmEQQEAOiFQQNcDF2JZI+IBBESRUNyGjzymJAGAtIPCxoBwsUC2llRQhEQyYa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffffff00ff
Perceptual Hash:8c886e6c9c1f8f3c
Difference Hash:2380f0f0b0c06480
Wavelet Hash:107c0f0f0f3f00fd
Color Hash:#d25c2d

Other Hashes

Crop Resistant:23808070f0b08060,0000000000000000,0000832424430000

Scan History

Scan history not available

Unable to load historical scan data