ScanMalware.com

Security Scan Report: yumrecipebox.com

Site favicon
Submitted: Oct 4, 2026, 1:57:56 PMCompleted: Oct 4, 2026, 1:59:00 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Cloned Google Merchant Center page on a 27-day-old throwaway recipe domain; analyst-vetted ClickFix kit serves a fake Cloudflare modal that fetches a Win+R command on click, and threat intel flags the domain as malware C2.

Risk Factors (5)
Known malicious ClickFix phishing kit serving a fake Cloudflare verification modal
CRITICAL YARA rule match on page code (ClickFix_CF_Modal_Remote_Command_Builder)
Brand impersonation of Google on a non-Google domain
Multi-source threat-intelligence match naming the primary domain as malware (nightshadec2)
Very new domain (27 days) inconsistent with the brand it presents
Domain age information unavailable

Details

Page Title

Promote Your Business with Merchant Center - Google for Retail

Scan Type

public

Domain Name Analysis

Domain 'yumrecipebox.com' uses the commercial generic top-level domain (.com). Count 12 characters in 'yumrecipebox' containing five vowels alongside 7 consonants. Segmentation suggests three words: yum, recipe, box. Average segment length settles at three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://yumrecipebox.com/

Page Load Overview

6.06s
Total Load Time
33.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:17,112 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping71% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
71%
technology software
67%
corporate business
44%
social media network
36%
documentation technical
26%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1251.241.125.243United Kingdom
AS398256Ultahost, Inc.
4142.251.20.138Google · CDNUnited States
AS15169Google LLC
4142.251.13.94Google · CDNUnited States
AS15169Google LLC
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4142.251.20.132Google · CDNUnited States
AS15169Google LLC
4142.251.150.119Google · CDNUnited States
AS15169Google LLC
4142.251.127.95Google · CDNUnited States
AS15169Google LLC
4142.251.127.84Google · CDNUnited States
AS15169Google LLC
4142.251.14.97Google · CDNUnited States
AS15169Google LLC
4142.251.127.100Google · CDNUnited States
AS15169Google LLC
8018--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DB74B5A391F4103781639BD9F19B7F11F9B9D1A7C14E5085B9BC43EA0FA6D23A50BB08

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:EfwUORNlqU/JBnwY3McnmrilSa2H+t+p+GN7lMNXNc4qh1AN:mwUHril0H26naA1AN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:341071:wAEpjOBiloAhKBAcAIBZ4URZAgEAHzkhGyQIMuHaAyOREIC6EKIABkAakFEBwUgECEAwUgRSh4BD0pjCxQRBAUAgmDBIl4PA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff1f191b1b1f1ff
Perceptual Hash:ee1591c7955c1d62
Difference Hash:d007272565670743
Wavelet Hash:3ef111118131f1ff
Color Hash:#8f6ce0

Other Hashes

Crop Resistant:d007272565670743

Scan History

Scan history not available

Unable to load historical scan data