Security Scan Report: lunchboxbyregina.com

Submitted: Completed: publiccompleted
This website contacted 19 IPs in 1 country across 7 domains to perform 83 HTTP transactions. The main domain is lunchboxbyregina.com and was registered 13 years ago.

Submitted URL: https://lunchboxbyregina.com

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

Legitimate-looking established catering site with no forms or malicious scripts, but the primary domain carries a single-source, unverified malware (strelastealer) report. Treat as possibly compromised; avoid submitting data until cleared.

Risk Factors (2)
Single-source threat-intel report of a stealer malware family (strelastealer) associated with the primary domain
Possible site compromise: a 13-year-old static catering page with no visible malicious code could be hosting or redirecting to a stealer payload in ways not captured by this scan
Domain age information unavailable

Details

Page Title

LbR |

Scan Type

public

Domain Name Analysis

Domain 'lunchboxbyregina.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'lunchboxbyregina' stretches across 16 characters containing five vowels alongside 11 consonants. Tokenizing the label suggests 3 words: lunchbox, by, regina. The median word length lands at six characters. No strong language cues emerged from the frequency lists.

Screenshot

Lunchbox Home Corporate Menu About Us lyMenu Services. Contact Us fe & Catering Whether you need Lunch or Breakfast custom meal for School, Company Programs or Events we have a variety of choices t...

Page Load Overview

2.12s
Total Load Time
13.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,545 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate business93% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

corporate business
93%
download file sharing
80%
adult content
78%
blog personal website
77%
finance banking
72%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1167.222.16.186United States
AS63410PrivateSystems Networks
4142.251.110.95Google · CDNUnited States
AS15169Google LLC
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
4142.251.152.119Google · CDNUnited States
AS15169Google LLC
4192.178.183.94Google · CDNUnited States
AS15169Google LLC
4172.217.119.4Google · CDNUnited States
AS15169Google LLC
4172.217.117.4Google · CDNUnited States
AS15169Google LLC
4172.217.113.4Google · CDNUnited States
AS15169Google LLC
4172.217.115.4Google · CDNUnited States
AS15169Google LLC
4172.217.114.4Google · CDNUnited States
AS15169Google LLC
8319--

Detected Technologies13

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EEF3FAAF8BBE317531174745FAEA672482BCC233E9514CD6B9B6814CCF81BA601B711E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:FZdypaTfrCs4POImIuRNjcXscJGcz74k52wAG1QgvxeGMzsz0dotwmLwyDZ:NypcrjI4kowF1RvxeGMzszb6OwyDZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:163510:fL9QGNkYQhIYCiaGgWQQFAOWMmAAicVqAbxCTJZWQ1HWhwEoaCyioFBMRgCI8owUAUIEsowKRKDuoTDSNtQ0MLxIDAtYIDAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff000010383010
Perceptual Hash:ceb3cdccb0c59c82
Difference Hash:3669619161617371
Wavelet Hash:ffff3d0130383818
Color Hash:0f400030000

Scan History

Scan history not available

Unable to load historical scan data