Security Scan Report: www.essexprestigebuildingservicesltd.co.uk

Site favicon
Submitted: Completed: publiccompleted
This website contacted 19 IPs in 3 countries across 10 domains to perform 128 HTTP transactions. The main domain is essexprestigebuildingservicesltd.co.uk and was registered 9 months ago.

Submitted URL: https://www.essexprestigebuildingservicesltd.co.uk

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate-looking Essex building-services site compromised with an injected ClickFix 'Human Verification' blockchain loader; analyst-vetted kit + YARA + multi-feed malware IoC and CRITICAL IDS EtherHiding alerts. Do not interact.

Risk Factors (5)
Known malicious ClickFix 'Human Verification' kit injected into the page (analyst-vetted roster + YARA)
Packed/obfuscated JavaScript hiding threat-feed hosts and retrieving stage-2 address from a Polygon smart contract (EtherHiding)
Multi-source threat-intel malware matches against the primary domain ('clearfake', 'unknown loader')
CRITICAL/HIGH network IDS alerts for EtherHiding exfiltration and exploit-kit check-in
Unranked third-party script host (browse-codes-enter.beer) and blockchain RPC calls from page scripts
Domain age information unavailable

Details

Page Title

Essex Prestige Building Services Ltd – Trusted Building & Construction Services In Essex

Scan Type

public

Domain Name Analysis

The domain name 'www.essexprestigebuildingservicesltd.co.uk' uses the United Kingdom country-code top-level domain (.co.uk) and includes subdomain 'www'. Its registrable label 'essexprestigebuildingservicesltd' stretches across 32 characters with eleven vowels and 21 consonants. Tokenizing the label suggests five words: essex, prestige, building, services, ltd. The median word length lands at 8 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.essexprestigebuildingservicesltd.co.uk

Page Load Overview

8.63s
Total Load Time
7.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:9,206 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
20194.164.125.163United Kingdom
AS8560IONOS SE
6142.251.14.95Google · CDNUnited States
AS15169Google LLC
6142.251.110.97Google · CDNUnited States
AS15169Google LLC
6142.251.154.119Google · CDNUnited States
AS15169Google LLC
6142.250.154.94Google · CDNUnited States
AS15169Google LLC
6172.66.146.203Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6216.239.34.36Google · CDNUnited States
AS15169Google LLC
6178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
6142.251.14.148Google · CDNUnited States
AS15169Google LLC
6142.251.110.95Google · CDNUnited States
AS15169Google LLC
12819--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16A242B3279850236235F42D0A075FB28E25AF316DA9755E4B3FC91FC8FC4EA0697A319

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:L5tWMGCNhRKdG4GiPrFhzhXh9hVhHhCeNA3aVs0gX8nXqUfUY:ttWMGCNhRK/BhP3JnqUf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:220312:BrLRFAkcRwowQGeUSQQgMCE10YAJAQEoYpAEFgCAwEy1oeUUKDxgBJwVgGQRqoForKRMGEhHlApA4ymSGIwUYIOOIBAIIUFK

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff007066000000
Perceptual Hash:c1dd9fd5c4553814
Difference Hash:020212808c9a82b1
Wavelet Hash:ffffc96676060001
Color Hash:#ac8053

Other Hashes

Crop Resistant:020212808c9a82b1

Scan History

Scan history not available

Unable to load historical scan data