Security Scan Report: co-beauty.co.il

Site favicon
Submitted: Completed: publiccompleted
This website contacted 36 IPs in 3 countries across 22 domains to perform 200 HTTP transactions. The main domain is co-beauty.co.il.

Submitted URL: https://co-beauty.co.il/

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Hebrew hair-oil store (C.O) with contact-only forms and no impersonation, but its pages trigger CRITICAL exploit-kit C2 alerts (Gholoader TDS, fake WordPress plugin) via a malicious third-party domain — likely a compromised WordPress site. Avoid.

Risk Factors (4)
CRITICAL network IDS alerts for exploit-kit / trojan command-and-control (TA569 Gholoader TDS, TA2726 fake WordPress plugin)
Page pulls a script/asset from a domain named in malware C2 signatures
Apparent compromise of an otherwise ordinary retail/WordPress site, exposing visitors to malicious redirects or payloads
Third-party resource address flagged as a malicious host
Domain age information unavailable

Details

Page Title

שמן קוקוס לשיער בפורמולה חדשנית - C.O

Scan Type

public

Domain Name Analysis

Within the Israeli country-code top-level domain (.co.il), 'co-beauty.co.il' is registered. The second-level label 'co-beauty' is 9 characters long holding four vowels versus four consonants, plus one hyphen. Word splitting yields 2 words: co, beauty. The median word length lands at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://co-beauty.co.il/

Page Load Overview

7.51s
Total Load Time
3.8 MB
Total Size

Language Analysis

Primary Language

🇮🇱Hebrew
Code: he
Confidence:80%
Script:Hebrew
Direction:rtl

Detection Details

HTML Lang Attribute:he-IL
Text Length:8,416 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical95% confidence
Type: spa
Method: ml+structural

All Detected Categories

healthcare medical
95%
blog personal website
91%
news media journalism
89%
social media network
81%
real estate property
68%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
25172.67.213.98Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.20.95Google · CDNUnited States
AS15169Google LLC
5142.251.13.155Google · CDNUnited States
AS15169Google LLC
5142.251.20.97Google · CDNUnited States
AS15169Google LLC
5142.251.13.113Google · CDNUnited States
AS15169Google LLC
5157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
518.66.122.112Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
565.9.130.129Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
5142.251.157.119Google · CDNUnited States
AS15169Google LLC
5142.251.13.148Google · CDNUnited States
AS15169Google LLC
20036--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A594E7517CC35861516F11AFA867610C10A7EEF9D911A5D0BBFE40282FF1EE83BA3269

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:Y/Zq7OAAiK5XqcDcSEuMvqMhJyltBCPvs:q5Y/qWAQM

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:411565:lQgCBYAgjTgBQFAqnGAREhREUSNPBUB8hM6C4oK5QEi0YAkPCG5wRCodVAAMITAUAMhYdENTiCsRBAogAThxAAAgADjBKrQs

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00383c383c3d3b01
Perceptual Hash:8d52219972ad765b
Difference Hash:41716161717372c3
Wavelet Hash:013c3c3d3c3f3f03
Color Hash:#79d2cb

Scan History

Scan history not available

Unable to load historical scan data