Is kb.wpbakery.com safe?

The scan of kb.wpbakery.com on 22 Aug 2026 reached no verdict either way (score -6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with kb.wpbakery.com?

7 analysed samples communicate with this URL, including Smuggling.

How was kb.wpbakery.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

kb.wpbakery.com - URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned kb.wpbakery.com and returned a unknown verdict (score -6). The page resolved to 104.21.7.160 on CLOUDFLARENET - Cloudflare, Inc., US in US. The domain was registered 6171 days ago through NameCheap, Inc.. 6 domains and 2 IPs were contacted, over 3 HTTP requests. 7 malware samples communicate with this URL (Smuggling). The request followed 2 redirects before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -6) · Confidence 12%
Scanned URL: http://go.wpbakery.com/licensing
Domain: kb.wpbakery.com · IP: 104.21.7.160 · AS13335 · US
Server: cloudflare
Page title: Licensing | WPBakery API Documentation
HTTP status: 200 · text/html; charset=utf-8
Registrar: NameCheap, Inc. · domain age 6171 days · created 2009-09-28
TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 3 19: · subject CN=wpbakery.com
HTTP requests captured: 3
Scan tier: fast · observed 2026-08-22 12:58:19 UTC

Redirect chain

http://go.wpbakery.com/licensing
https://go.wpbakery.com/licensing
https://kb.wpbakery.com/docs/licensing/

Malware communicating with this URL (7)

These samples were observed contacting or being served from kb.wpbakery.com. Each links to its full analysis.

cbe851a67755891aa5a083490a3656b2d990c55ee247d7be0a30c57db44e7475 - referenced · cbe851a67755891aa5a083490a3656b2 · first seen 2026-08-22
1f6fb7a49842ec2da116249f8d2b33aa3737b69fbda2f93a7206b007f3c5b20b - referenced · 1f6fb7a49842ec2da116249f8d2b33aa · first seen 2026-08-20
Smuggling - referenced · 0a671d84672e367bebf78293820b8f9a · first seen 2026-08-20
c5fced2442e0b41d9e7bdd451b6629e216eb6e28016ae4a0218c0b68f3c710f0 - referenced · c5fced2442e0b41d9e7bdd451b6629e2 · first seen 2026-08-19
f6951c12bd283646f39ce709a1fafaa7368dfd0b395235e5111eade78d96c567 - referenced · f6951c12bd283646f39ce709a1fafaa7 · first seen 2026-08-17
1e3ea11a6df5aeaf1670546ce8aea1a569b1f082defa1a7169440aa1a63cf004 - referenced · 1e3ea11a6df5aeaf1670546ce8aea1a5 · first seen 2026-08-15
da3c6485fc7c24b48f0f99593fce3b2ca129f683badc82d7b0bcd5977b18e895 - referenced · da3c6485fc7c24b48f0f99593fce3b2c · first seen 2026-08-13

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post
Cross-host redirect chain

Detected technologies

Cloudflare
GitHub Pages
Fastly
Google Analytics
Cloudflare Insights

Contacted infrastructure

104.21.7.160 - AS13335 CLOUDFLARENET - Cloudflare, Inc., US (US)
172.67.136.242 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

kb.wpbakery.com
i4bz3vioze-dsn.algolia.net
www.googletagmanager.com
support.wpbakery.com
wpbakery.com
static.cloudflareinsights.com
104.21.7.160
172.67.136.242
https://kb.wpbakery.com/docs/licensing/
https://kb.wpbakery.com/img/favico-32x32.png
https://kb.wpbakery.com/docs/licensing
https://i4bz3vioze-dsn.algolia.net/
https://www.googletagmanager.com/
https://www.googletagmanager.com/gtm.js?id=GTM-5QKCSM9
https://kb.wpbakery.com/opensearch.xml
https://kb.wpbakery.com/assets/css/styles.b39e1d3b.css
https://kb.wpbakery.com/assets/js/runtime~main.e4b4686b.js
https://kb.wpbakery.com/assets/js/main.6f741985.js
https://www.googletagmanager.com/ns.html?id=GTM-5QKCSM9
https://kb.wpbakery.com/img/wpbakery-logo-light.svg

Other scans of kb.wpbakery.com (10)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

22 Aug 2026 - unknown · https://wpbakery.com/
20 Aug 2026 - unknown
20 Aug 2026 - unknown · https://wpbakery.com/
20 Aug 2026 - unknown
20 Aug 2026 - unknown · https://wpbakery.com/
19 Aug 2026 - unknown
19 Aug 2026 - unknown · https://wpbakery.com/
17 Aug 2026 - unknown · https://wpbakery.com/
15 Aug 2026 - unknown
15 Aug 2026 - unknown · https://wpbakery.com/

Questions about kb.wpbakery.com

Is kb.wpbakery.com safe?: The scan of kb.wpbakery.com on 22 Aug 2026 reached no verdict either way (score -6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with kb.wpbakery.com?: 7 analysed samples communicate with this URL, including Smuggling.
How was kb.wpbakery.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of kb.wpbakery.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan