Security Scan Report: rayinternational.com.bd

Submitted: Completed: publiccompleted
This website contacted 10 IPs in 2 countries across 9 domains to perform 65 HTTP transactions. The main domain is rayinternational.com.bd.

Submitted URL: https://rayinternational.com.bd

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Compromised 1-day-old business site serving an injected ClickFix Win+X Terminal overlay kit with multiple CRITICAL malware IDS alerts and exploit-kit resource loads. Treat as malicious; do not interact.

Risk Factors (7)
Analyst-vetted ClickFix WinX Terminal overlay kit injected into the page (CRITICAL phishing/malware delivery)
YARA rule ClickFix_WinX_Overlay_Kit matched on HTML body
Six CRITICAL network IDS alerts for ClickFix domain / EtherHiding exfiltration
Multiple third-party resource domains flagged as exploit kits/loaders (norediam.com, interseqf.com, checkyoubrowse.codes)
Primary domain flagged as a malware loader by threat intelligence
Domain only 1 day old and unranked
Injected SEO/dating-spam content unrelated to the site's stated business, consistent with compromise
Domain age information unavailable

Details

Page Title

Home - Ray International

Scan Type

public

Domain Name Analysis

The domain name 'rayinternational.com.bd' uses the Bangladeshi country-code top-level domain (.com.bd) with no subdomain. The second-level label 'rayinternational' is 16 characters long split between seven vowels and nine consonants. Segmentation suggests 2 words: ray, international. The median word length lands at eight characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://rayinternational.com.bd

Page Load Overview

25.32s
Total Load Time
124 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:11,495 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%
news/blog
40%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11185.146.167.199United States
AS4825420i Limited
6142.251.110.95Google · CDNUnited States
AS15169Google LLC
6104.18.66.220Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
635.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
6142.251.14.95Google · CDNUnited States
AS15169Google LLC
6172.67.70.207Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6510--

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15293E873424D063A438206DA7088321D98F5DC37D6A140B8FBFB15DFEADAC95857BB26

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:Hk0iQeLCOLAtaBAIAT8wAxbZWfeK7ypE/8gUOGFzfycKXLVReAOQTY8GEO9yMwQJ:Hk0QLHLAtqAIATfAxbZWfeKGi/RUO4fz

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:95879:ApgESvYignACgDAjhAdCFkgUaSQCA5IGCzWKdYqCAKEgLCErIhYQyYAKAQIBs4gQNAcBCQAoA0Y2CLQvAQbhhGBhVgpPtKyA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7f3f3f7f031f1f7f
Perceptual Hash:81c7c03cf0f02f6f
Difference Hash:c0c0d0c0e6f6a0c0
Wavelet Hash:7e3e3e3e00001f3e
Color Hash:#ac6953

Other Hashes

Crop Resistant:c0c0d0c0e6f6a0c0

Scan History

Scan history not available

Unable to load historical scan data