Security Scan Report: www.buckshealthcare.nhs.uk

Redirected to:
https://www.buckshealthcare.nhs.uk/
Site favicon
Submitted: May 28, 2026, 1:45:26 PMCompleted: May 28, 2026, 1:45:53 PMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 3 domains to perform 1 HTTP transaction. The main domain is buckshealthcare.nhs.uk.

Submitted URL: http://www.buckshealthcare.nhs.uk/

Effective URL: https://www.buckshealthcare.nhs.uk/Redirected

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

The site hosts critical Magecart and keylogger malware despite lacking forms; classified as a confirmed malware distribution scam.

Risk Factors
Critical Magecart skimmer indicates credit‑card stealing capability
High‑severity JavaScript keylogger signatures
Obfuscated JavaScript with high entropy and concatenation
Dynamic eval() execution
Unranked domain (potentially new or low‑reputation)
Domain age information unavailable

Details

Page Title

Buckinghamshire Healthcare NHS Trust

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(59%)

Domain Information

Domain 'www.buckshealthcare.nhs.uk' uses the United Kingdom country-code top-level domain (.nhs.uk) and includes subdomain 'www'. The second-level label 'buckshealthcare' is 15 characters long split between five vowels and 10 consonants. Breaking it apart gives 2 words: bucks, healthcare. Median word length comes out to 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://www.buckshealthcare.nhs.uk/

Page Load Overview

1.85s
Total Load Time
47
HTTP Requests
5
Domains
604 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:3,237 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software59% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
59%
documentation technical
55%
government public service
35%
corporate
25%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1713.226.244.100United States
AS16509Amazon.com, Inc.
15192.124.249.167Menifee, California, United States
AS30148Sucuri
15142.251.156.119United States
AS15169Google LLC
473--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1ECF3C6E2E8759239361BC7D826DFDA26F72A6080EC049F7576FD10944BD03ED202E59B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:vAbcDtzalgbVybVtbVpj2/+yI/afb8f++p:oGzalgbVybVtbVB2Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:172017:8AY2lFDgCcIDIFjgopiDFOBQiAhQBwIBwIQTUTIYwRHrgABNEEEBACkNySEwFRiCE4EEQAQIQkklbSjBwFMlBQCQhFVwBiFA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff0000ffffffffff
Perceptual Hash:be0e96b4b5959119
Difference Hash:282ff12a220b3e22
Wavelet Hash:9e000083bb83bfff
Color Hash:#862e2d

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data