ScanMalware.com

Security Scan Report: verifiedbmsells.com

Submitted: Oct 12, 2026, 1:57:11 AMCompleted: Oct 12, 2026, 1:57:52 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Compromised fashion shop page serving a ClickFix fake-CAPTCHA / ClearFake EtherHiding loader chain (2 CRITICAL YARA hits, two analyst-vetted malicious kits). Do not interact or copy any prompt.

Risk Factors (5)
Analyst-vetted malicious kit loaders (ClickFix FakeCAPTCHA + ClearFake) injected into the page
CRITICAL YARA hits for a blockchain/EtherHiding loader chain
Obfuscated JavaScript concealing RPC/known-attacker hosts contacted for next-stage payload delivery
Fake CAPTCHA 'human verification' prompt designed to make victims paste a malicious command
Domain unranked in Cisco Umbrella with a low legitimacy score (10/100) and only ~291 days old
Domain age information unavailable

Details

Page Title

Verified BM Sell – Verified BM Sell is a famous fashion shop

Scan Type

public

Domain Name Analysis

The domain 'verifiedbmsells.com' uses the commercial generic top-level domain (.com). Its registrable label 'verifiedbmsells' stretches across 15 characters containing five vowels alongside ten consonants. Word splitting yields 3 words: verified, bm, sells. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://verifiedbmsells.com

Page Load Overview

6.83s
Total Load Time
696 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:2,524 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content64% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

adult content
64%
e-commerce shopping
46%
government public service
42%
finance banking
35%
healthcare medical
33%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10151.158.44.114Bangladesh
AS138145Web Host BD
6104.17.25.14Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
652.63.121.74Aws · CLOUDSydney, New South Wales, Australia
AS16509Amazon.com, Inc.
6142.251.154.119Google · CDNUnited States
AS15169Google LLC
6142.251.127.104Google · CDNUnited States
AS15169Google LLC
345--

Detected Technologies8

WordPressv7.0.7
100%
MetaGenerator
100%
JQueryv3.7.1
100%
PHP
50%
MySQL
50%
HTTP/3
40%
WordPress Site Editor
30%
WordPress Block Editor
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T137D3C561536404FA3D6F8798D04AF318F248AA41DA0996E7F0FDD1545ACCEFA18B3B4E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:ViBneOoDbZurZobwemlUVugamX45foyWAnkI:kBeOnZobwemlUVugamX45foybj

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:142488:UQwkEEwZEBUvtQwAgCgURkQ5QsGoGj4AdCohEDMEYNEg0gC2oQAI4VYq6DBABxAgRmaUBmAthKISSHCYEiIKfloAAABQCISI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fff7818181ffff
Perceptual Hash:ae07850f4b147e5b
Difference Hash:f1cc0d0d292f0ccc
Wavelet Hash:00e7c7818181ffef
Color Hash:#865c2d

Other Hashes

Crop Resistant:f1cc0d0d292f0ccc,31b331c8c0e0d0d0,c381d1c1c1f169cd,297191033774d5d5,8d2d2d2d0c5d3d2c

Scan History

Scan history not available

Unable to load historical scan data