Security Scan Report: knskielce.pl

Site favicon
Submitted: Completed: publiccompleted
This website contacted 16 IPs in 3 countries across 12 domains to perform 87 HTTP transactions. The main domain is knskielce.pl and was registered 13 years ago.

Submitted URL: https://knskielce.pl

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate Polish IT services site that has been compromised: injected ClickFix fake 'Human Verification' overlay delivered via EtherHiding blockchain loaders. hunting rule, kit roster, Safe Browsing and critical IDS alerts confirm malware distribution. Do not interact.

Risk Factors (5)
Compromised legitimate site serving a ClickFix 'Human Verification' overlay kit (Windows Win+X -> Terminal)
EtherHiding blockchain-based payload hosting via Polygon smart contracts
6 high-precision hunting-rule matches for ClickFix injector and packed contract loader
Google Safe Browsing: Unwanted Software; primary domain flagged as iclickfix malware
9 CRITICAL IDS alerts for EtherHiding exfiltration traffic
Domain age information unavailable

Details

Page Title

SERWIS KOMPUTEROWY KIELCE - Naprawa komputerów i laptopów

Scan Type

public

Domain Name Analysis

The domain 'knskielce.pl' uses the Polish country-code top-level domain (.pl). The second-level label 'knskielce' is 9 characters long holding 3 vowels versus six consonants. Segmentation suggests 3 words: kn, s, kielce. Average segment length settles at 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

KOMPUTERY USŁUGI IT * SYSTEMY ZABEZPIECZEŃ ¥ INSTALACJE * REKLAMA KONTAKT USŁUGI REKLAMOWE © Strony WWW * Pozycjonowanie * Ulotki * Wizytówki * Marketing internetowy Sprzedaż komputerów Roboty...

Page Load Overview

6.04s
Total Load Time
6.2 MB
Total Size

Language Analysis

Primary Language

🇵🇱Polish
Code: pl
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:pl-PL
Text Length:6,069 chars
Detector Agreement:100%

All Detected Languages

🇵🇱pl(58%)🇺🇸en(40%)🇩🇪de(1%)🇻🇳vi(1%)

Website Classification

Primary Category

documentation technical91% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
91%
government public service
75%
corporate business
72%
technology software
69%
adult content
36%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5486.111.242.217Poland
AS47544IQ PL Sp. z o.o.
9142.250.154.94Google · CDNUnited States
AS15169Google LLC
6188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5142.251.13.94Google · CDNUnited States
AS15169Google LLC
5142.251.20.95Google · CDNUnited States
AS15169Google LLC
5172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
5104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
8716--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1EF4482A34314437EA2C508D2E114310B55E2D96BEC38215DFFE76AEBFA6DD826439732

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:udE/+OnW3mXdOGTLSDlYcYiibLKh/8rY3tEEK6oVobXai:C3mXdOGHSDlYcYioVobXai

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:256327:CxSQEEAqGqIkYO3QJAqinnQhQCAEvAxAiEwAcfk49AAo0o8slDKggAiEEAi4oABgMMA3ACACghMAOgmY1PAkAcDYoUoERDS0

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc0f0f0f0e0e0ff
Perceptual Hash:ee58b76689434749
Difference Hash:283001b1b1454d0e
Wavelet Hash:d2c0f0f0f0e0e0ff
Color Hash:06001000188

Scan History

Scan history not available

Unable to load historical scan data