Security Report: kingsrxandwellness.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/f2bd1375-ee9f-4c5f-ba68-b32df48f5c98 Domain and IP registration (RDAP)/api/v1/rdap/f2bd1375-ee9f-4c5f-ba68-b32df48f5c98How often this domain was scanned/api/v1/domain/stats/kingsrxandwellness.com Scan history for this domain/api/v1/domain/history/kingsrxandwellness.com?limit=15

This website contacted 22 IPs in 2 countries across 11 domains to perform 116 HTTP transactions. The main domain is kingsrxandwellness.com and was registered 13 years ago.

Submitted URL: https://kingsrxandwellness.com

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Legitimate-looking 13-year-old pharmacy site whose page HTML is compromised, carrying the ErrTraffic/Exvicy WordPress injected loader (CRITICAL YARA + analyst-vetted kit roster) with malware/exploit-kit IDS alerts and blockchain RPC exfiltration.

Risk Factors (6)

Critical YARA match for the ErrTraffic/Exvicy injected WordPress loader in the page HTML

Known malicious kit identified by the analyst-vetted kit roster

Indicators of Compromise: primary domain reported as 'clearfake' malware by two independent threat feeds

Critical IDS malware/exploit-kit alerts, including EtherHiding exfiltration

Blockchain RPC connections from page scripts consistent with EtherHiding/exfiltration activity

Unranked third-party script host browse-codes-enter.beer contacted via fetch

Domain age information unavailable

Details

Page Title

Home - King's Pharmacy

Scan Type

public

Favicon Hash

MMH3: 932023959

MD5: 32d4e90485a078a50fdc7a9a417c8a35

Domain Name Analysis

The domain 'kingsrxandwellness.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Count 18 characters in 'kingsrxandwellness' split between 4 vowels and 14 consonants. Tokenizing the label suggests five words: kings, r, x, and, wellness. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

5.09s

Total Load Time

4.8 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:5,872 chars

Detector Agreement:100%

Website Classification

Primary Category

healthcare medical53% confidence

Type: spa

Method: ml+structural

All Detected Categories

healthcare medical

53%

education learning

39%

corporate

25%

news/blog

20%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	192.185.67.254	Ashburn, Virginia, United States	AS31898Oracle Corporation
5	192.0.76.3	San Francisco, California, United States	AS2635Automattic, Inc
5	172.217.113.4Google · CDN	United States	AS15169Google LLC
5	142.251.20.94Google · CDN	United States	AS15169Google LLC
5	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
5	142.250.154.94Google · CDN	United States	AS15169Google LLC
5	142.251.14.120Google · CDN	United States	AS15169Google LLC
5	192.178.183.95Google · CDN	United States	AS15169Google LLC
116	22	-	-