Security Scan Report: sunupackaging.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 10 IPs in 3 countries across 8 domains to perform 49 HTTP transactions. The main domain is sunupackaging.com and was registered 8 months ago.

Submitted URL: https://sunupackaging.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate-looking packaging company site compromised and injecting a Cloudflare-branded ClickFix 'Human Verification' overlay that pushes visitors to run attacker commands; analyst-vetted malware kit confirmed.

Risk Factors (6)
Compromised WordPress site injecting a fake Cloudflare 'Human Verification' ClickFix overlay that instructs Windows users to open Terminal and paste attacker-supplied commands
EtherHiding: stage-2 payload address read from a blockchain smart contract to evade takedown
Obfuscated script concealing known-malicious hosts and connecting to blockchain RPC endpoints (polygon.gateway.tenderly.co, rpc.ankr.com, blastapi.io)
Unranked third-party script host browse-codes-enter.beer (ErrTraffic beer cluster) serving injected code
Primary domain carries a malware (loader) threat-intelligence report
Site content (marketing copy, default 'Hello world!' blog posts) is unrelated to the injected verification overlay — evidence of tampering
Domain age information unavailable

Details

Page Title

Sune Solution d'emballage flexible

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'sunupackaging.com' is registered with no subdomain. Its registrable label 'sunupackaging' stretches across 13 characters split between five vowels and 8 consonants. Breaking it apart gives three words: sun, u, packaging. The median word length lands at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://sunupackaging.com

Page Load Overview

2.39s
Total Load Time
5.0 MB
Total Size

Language Analysis

Primary Language

🇫🇷French
Code: fr
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR
Text Length:9,754 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical34% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
34%
corporate business
26%
news/blog
20%

Detected Features

Search
Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
135.135.23.164France
AS16276OVH SAS
4192.178.183.95Google · CDNUnited States
AS15169Google LLC
4104.20.38.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4104.21.56.13Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4152.236.9.75Frankfurt am Main, Hesse, Germany
AS396356Latitude.sh
4142.251.110.94Google · CDNUnited States
AS15169Google LLC
435.227.193.242Google · CDNKansas City, Missouri, United States
AS396982Google LLC
4178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
4172.67.175.174Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4910--

Detected Technologies5

WordPressv7.1.3
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T15DF384917B9A1A3D311F01CFD01B2A0C14DBEFF9EA55D6E8F2FA5121A3B5C9036921B4

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:68st2iMP4EddSQEdek4vZhZmfqxiS+GsvpHc:y2ifoAzdJ4vZhZF

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:161091:kgxEBmqPpYEIYJaKAEgAAQKOUDMIgYg4FAEGDCSkgoUkKxF6UJFltBKg4SSBAAAwQMYBtDQkIAUbgAjEHkgDEcUIJWHyCAIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff00000081c342
Perceptual Hash:a8cfd4ff007d2a24
Difference Hash:80014500450baa96
Wavelet Hash:ffff83008181c366
Color Hash:#ac539c

Scan History

Scan history not available

Unable to load historical scan data