Security Scan Report: kbtherapies.com

Redirected to:
https://www.kbtherapies.com/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 3 IPs in 1 country across 4 domains to perform 87 HTTP transactions. The main domain is kbtherapies.com and was registered 8 years ago.

Submitted URL: https://kbtherapies.com

Effective URL:
https://www.kbtherapies.com/
Redirected

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Legitimate-looking massage business site whose page carries an injected, analyst-vetted ClickFix 'Human Verification' loader (CRITICAL hunting rule) plus a malware threat-intel match — treat as compromised; do not interact.

Risk Factors (4)
Known malicious ClickFix 'Human Verification' overlay kit injected into the page (CRITICAL, analyst-vetted)
Impact:CRITICAL hunting-rule match for packed contract loader reading overlay host from a Polygon smart contract
Content-malware threat-intel match on the primary domain (malware loader)
Consistent with a compromised legitimate WordPress site serving malicious script to visitors
Domain age information unavailable

Details

Page Title

KB Therapies Eglinton Derry Northern Ireland

Scan Type

public

Domain Name Analysis

The domain name 'kbtherapies.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'kbtherapies' is 11 characters long split between four vowels and 7 consonants. It segments into two words: kb, therapies. Median word length comes out to 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

KB Therapies Massage and Reflexology Treatments in Eglinton, Derry, Northern Ireland Welcome to KB Therapies. Indian Head Massage Sports Massage OC EMT n(_ A" _ ed ving the manipulation of soft t...

Page Load Overview

4.47s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:1,582 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software66% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
66%
healthcare medical
58%
documentation technical
55%
blog personal website
45%
corporate
35%

Detected Features

Articles
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2945.158.164.135United States
AS15510Compuweb Communications Services Limited
29142.251.20.95Google · CDNUnited States
AS15169Google LLC
29192.178.183.94Google · CDNUnited States
AS15169Google LLC
873--

Detected Technologies6

WordPressv7.0.7
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A27309F3925011AA5A074AFA92CC7A198831CA57DD0246CD78F5214BFB96FF63363339

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/MCMPMCMfMCM8MCMGMCM/MCMtMCMAsVMJIKpypeMAua6APAo8wAiZdLW1X/kTPAf:1kAMAu5APAofAiZdG/kTPAtfcJmC8Qlo

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:74877:ChEQhBKIFMFYTI4ZC0AOkAZiFgEQCGyBoQlJi0McDBwChSxfESAhUmoBlCKJADpgUKBaCB8QhRWiIQg1EGCA0UwUEQQAGYAE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffdfffdfff83c3c7
Perceptual Hash:bccf316c924d32c6
Difference Hash:30302636282e321d
Wavelet Hash:9e9e9e838f838383
Color Hash:N/A

Other Hashes

Crop Resistant:30302636282e321d

Scan History

Scan history not available

Unable to load historical scan data