Security Report: uspackagingllc.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/d65b5b96-2e01-40cd-9308-8c4997e15e41 Domain and IP registration (RDAP)/api/v1/rdap/d65b5b96-2e01-40cd-9308-8c4997e15e41 Certificate Transparency/api/v1/ct/uspackagingllc.com How often this domain was scanned/api/v1/domain/stats/uspackagingllc.com Scan history for this domain/api/v1/domain/history/uspackagingllc.com?limit=15

This website contacted 28 IPs in 2 countries across 19 domains to perform 103 HTTP transactions. The main domain is uspackagingllc.com and was registered 21 years ago.

Submitted URL: https://uspackagingllc.com

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Legitimate 20-year-old packaging company site that has been compromised and now serves an injected ClickFix/EtherHiding kit with a fake 'Human Verification' overlay, blockchain-loaded payloads and 10 CRITICAL malware IDS alerts. Do not interact.

Risk Factors (5)

Injected ClickFix / fake 'Human Verification' overlay telling visitors to paste commands into Windows Terminal

Blockchain-based payload retrieval (EtherHiding) via Polygon smart contracts and multiple RPC domains

Obfuscated script concealing known-malicious hosts (1rpc.io, polygon.drpc.org, polygon.gateway.tenderly.co)

Multi-source Indicators of Compromise on scripts/assets loaded by the page (interseq.at, chordapple.com)

10 CRITICAL IDS alerts identifying a network trojan / exploit-kit activity in the session

Domain age information unavailable

Details

Page Title

Contract Packaging Solutions - US Packaging

Scan Type

public

Favicon Hash

MMH3: 1253254016

MD5: 199b6fa922e7827a51f725112ee739cf

Domain Name Analysis

The domain 'uspackagingllc.com' uses the commercial generic top-level domain (.com). The core label 'uspackagingllc' covers 14 characters containing 4 vowels alongside ten consonants. Segmentation suggests three words: us, packaging, llc. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.53s

Total Load Time

47.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,784 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical57% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

57%

corporate

35%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
22	162.159.135.42Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	192.178.183.95Google · CDN	United States	AS15169Google LLC
3	142.251.110.97Google · CDN	United States	AS15169Google LLC
3	104.21.27.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
3	192.178.183.94Google · CDN	United States	AS15169Google LLC
3	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	104.21.42.198Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
103	28	-	-