Is purchase.junaidworld.com safe?

No. MalwareAnalyzer scanned purchase.junaidworld.com on 21 Aug 2026 and returned a suspicious verdict with a score of 30 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.

How was purchase.junaidworld.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

purchase.junaidworld.com - suspicious URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned purchase.junaidworld.com and returned a suspicious verdict (score 30), categorised as credential-harvest. The page resolved to 31.97.75.196 on MNT-HOSTINGER in LT. The domain was registered 5498 days ago through GoDaddy.com, LLC. 7 domains and 7 IPs were contacted, over 11 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 30) · Confidence 42%
Scanned URL: https://purchase.junaidworld.com/login/?next=/
Domain: purchase.junaidworld.com · IP: 31.97.75.196 · AS47583 · LT
Server: nginx/1.24.0 (Ubuntu)
Page title: Purchase Tracking System
HTTP status: 200 · text/html; charset=utf-8
Registrar: GoDaddy.com, LLC · domain age 5498 days · created 2011-08-02
TLS issuer: C=US, O=Let's Encrypt, CN=YE2 · valid to Nov 17 22: · subject CN=purchase.junaidworld.com
HTTP requests captured: 11 · cookies set: 1 · outgoing links: 1
Scan tier: standard · observed 2026-08-21 10:26:15 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Valid TLS, no impersonation or off-origin credential post
Certificate issued < 48h ago
Matches phishing-kit family "Generic Office365 Harvester"

Detected technologies

Nginx
WordPress

Contacted infrastructure

31.97.75.196 - AS47583 MNT-HOSTINGER (LT)
104.26.3.143 - AS13335 Cloudflare, Inc. (United States)
104.17.208.5 - AS13335 Cloudflare, Inc. (United States)
103.180.114.1 - AS200325 BUNNYWAY, informacijske storitve d.o.o (Australia)
142.250.195.99 - AS15169 Google LLC (India)
91.108.99.163 - AS47583 IPFFM Internet Provider Frankfurt GmbH (Australia)

Observed indicators

purchase.junaidworld.com
cdn.tailwindcss.com
fonts.googleapis.com
cdn.jsdelivr.net
sp-ao.shortpixel.ai
fonts.gstatic.com
junaidworld.com
31.97.75.196
104.26.3.143
104.17.208.5
142.250.195.138
103.180.114.1
142.250.195.99
91.108.99.163
https://purchase.junaidworld.com/login/?next=/
https://cdn.tailwindcss.com/
https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap
https://cdn.jsdelivr.net/npm/tom-select@2.2.2/dist/css/tom-select.css
https://cdn.jsdelivr.net/npm/tom-select@2.2.2/dist/js/tom-select.complete.min.js
https://sp-ao.shortpixel.ai/client/to_webp,q_glossy,ret_img,w_422/https://junaidworld.com/wp-content/uploads/2023/09/footer-logo.png.webp

Questions about purchase.junaidworld.com

Is purchase.junaidworld.com safe?: No. MalwareAnalyzer scanned purchase.junaidworld.com on 21 Aug 2026 and returned a suspicious verdict with a score of 30 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.
How was purchase.junaidworld.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of purchase.junaidworld.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan