Security Scan Report: kbkpreschools.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 2 countries across 13 domains to perform 138 HTTP transactions. The main domain is kbkpreschools.com and was registered 6 years ago.

Submitted URL: https://kbkpreschools.com

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Legitimate-looking preschool site that appears compromised: its domain carries a named-malware threat-intel tag and it fires critical EtherHiding/blockchain-loader IDS alerts. No forms or impersonation, so risk is malware exposure, not phishing.

Risk Factors (4)
Named malware-family threat-intel match on the primary domain
CRITICAL IDS malware alert (EtherHiding exfiltration) observed twice
Blockchain RPC endpoints (polygon.drpc.org, 1rpc.io) contacted from an unrelated education page
Site appears compromised: benign preschool content served alongside a malicious script loader
Domain age information unavailable

Details

Page Title

Kids Be Kids – Preschools

Scan Type

public

Domain Name Analysis

You're looking at domain 'kbkpreschools.com' on the commercial generic top-level domain (.com) with no subdomain. The second-level label 'kbkpreschools' is 13 characters long with three vowels and 10 consonants. Segmentation suggests 3 words: kb, k, preschools. Median word length comes out to two characters. No strong language cues emerged from the frequency lists.

Screenshot

U CALLNOW Presch ABOUT US PROGRAMS FAQS LOCATIONS CONTACT US Experience the Joy of Learning | SCHEDULEATOUR &

Page Load Overview

18.26s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:4,011 chars
Detector Agreement:75%

Website Classification

Primary Category

education learning85% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
85%
government public service
60%
phishing scam
60%
blog personal website
57%
social media network
48%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
19216.246.46.90Chicago, Illinois, United States
AS23352DEFT.COM
7104.18.179.120Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.20.97Google · CDNUnited States
AS15169Google LLC
7188.114.96.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7142.251.153.119Google · CDNUnited States
AS15169Google LLC
7142.250.154.149Google · CDNUnited States
AS15169Google LLC
7216.239.32.36Google · CDNUnited States
AS15169Google LLC
7142.251.127.156Google · CDNUnited States
AS15169Google LLC
7142.251.20.94Google · CDNUnited States
AS15169Google LLC
7192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
13818--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AE141873B555243E212F138E501D624D90DAEAEAE941D6E9FDF72210C1EAEF2317236C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:R/qZPuaLbRg0DrEuiBKe9xyPTYa49Md0x/4:Q

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:207704:CCFBBwFBgB1AEGOUWMAASuSCiKkJAgInAAUU9WmIwZJSghIgj9TX6iDonikIEBQFRCjhAiCAIBJCCiwCAogwgCCAIICAAZjI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffd40808091e1c4
Perceptual Hash:ead8a58e9ce5c921
Difference Hash:238d91112923c3dd
Wavelet Hash:fffdc08080b1e1e5
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data