ScanMalware.com

Security Scan Report: bambofashions.com

Site favicon
Submitted: Completed: publiccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Compromised storefront serving the analyst-vetted ClearFake/ClickFix loader: CRITICAL YARA Ethereum/Polygon contract loader plus rival-kit cleanup script, and the domain is flagged as clearfake malware by two independent threat feeds.

Risk Factors (4)
Known ClearFake/ClickFix phishing-malware kit injected into page body (roster-anchored, 2 rules)
Multi-source corroborated Indicators of Compromise for the primary domain as content malware
Domain only 126 days old and unranked in Cisco Umbrella (weak prior only)
Compromised-looking e-commerce storefront (Exchange & Refund Policy, my-account link) serving injected loader
Domain age information unavailable

Details

Page Title

N/A

Scan Type

public

Domain Name Analysis

Domain 'bambofashions.com' uses the commercial generic top-level domain (.com). Count 13 characters in 'bambofashions' containing five vowels alongside eight consonants. Splitting it apart reveals 3 words: b, ambo, fashions. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bambofashions.com

Page Load Overview

5.01s
Total Load Time
495 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:267 chars
Detector Agreement:100%

Website Classification

Primary Category

e-commerce shopping34% confidence
Type: spa
Method: ml+structural

All Detected Categories

e-commerce shopping
34%
healthcare medical
34%
government public service
31%
finance banking
28%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14213.130.145.51Paris, Île-de-France, France
AS47583Hostinger International Limited
11142.251.110.95Google · CDNUnited States
AS15169Google LLC
11104.16.56.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11142.251.14.94Google · CDNUnited States
AS15169Google LLC
11142.251.13.95Google · CDNUnited States
AS15169Google LLC
11104.16.57.10Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
696--

Detected Technologies11

WordPressv7.0.7
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
Litespeed Cache
40%
LiteSpeed
40%
Hostinger
40%
HTTP/3
40%
particles.js
20%
WooCommerce
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1780408B2A7A4187A237B037DFC56B64878384533E64DA2E6F8BEC25C45D4BD311A170E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:pZNVAR9G1D6iu54m84fhAWGA7AYfAtHpA08qxUJCk52z8Gvy0O4w00unGg3OafA7:wR9eRZcUP4tPAvjsJ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:175653:GZEQBcjTLIk9yzQcEQCAAdNgAKhrEBOMRoBQ8AQsGlAkBTVAIrC4kglBAkCBagBcIUrgCgUEIBwiIQqQpxkQe5VpPiggAAOk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff7f10102c664700
Perceptual Hash:82dca2b3cbbc8c69
Difference Hash:08d571f1c8cc8de9
Wavelet Hash:ff7f10102c6ee701
Color Hash:#77862d

Other Hashes

Crop Resistant:08d571f1c8cc8de9,3110586848d4d6da,636a63cbed85a030,6e485c7830b0dd0c,d4f0b0d8cccc8de9

Scan History

Scan history not available

Unable to load historical scan data