Security Report: coalesce-construction.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/0f06b85f-39e2-4df3-85a5-7ba774006623 Domain and IP registration (RDAP)/api/v1/rdap/0f06b85f-39e2-4df3-85a5-7ba774006623 Certificate Transparency/api/v1/ct/coalesce-construction.com How often this domain was scanned/api/v1/domain/stats/coalesce-construction.com Scan history for this domain/api/v1/domain/history/coalesce-construction.com?limit=15

This website contacted 18 IPs in 3 countries across 15 domains to perform 89 HTTP transactions. The main domain is coalesce-construction.com and was registered 13 years ago.

Submitted URL: https://coalesce-construction.com

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Legit-looking Virginia construction site whose primary domain is flagged as malware and which serves blockchain-hosted (EtherHiding) malicious script with critical IDS malware/exfil alerts — likely a compromised site distributing malware. Do not interact.

Risk Factors (5)

Content-malware threat-intel match on the PRIMARY scanned domain (clearfake, 2 independent feeds)

CRITICAL IDS malware alert for EtherHiding exfiltration (x3)

Scripts/payloads served from externally flagged malicious hosts (checkyoubrowse.codes, sentrydb.org)

Blockchain RPC connections used as a payload/exfil channel (wallet-drainer/EtherHiding pattern)

Datacenter scanner received a Cloudflare challenge while residential client got real content — evasion-consistent, though by itself benign bot protection

Domain age information unavailable

Details

Page Title

Home - Coalesce Construction Company | Call Now: (757) 689-1717

Scan Type

public

Favicon Hash

MMH3: 1755867479

MD5: 9563399816bd38f5442927df7dd2296b

Domain Name Analysis

The domain name 'coalesce-construction.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'coalesce-construction' spans 21 characters containing 8 vowels alongside twelve consonants, notching 1 hyphen. Breaking it apart gives two words: coalesce, construction. Median word length comes out to 10 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.59s

Total Load Time

12.3 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:5,651 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service48% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

48%

real estate property

43%

social media network

35%

corporate

25%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
21	160.153.0.63Cloudflare · CDN	United States	AS209242Cloudflare London, LLC
4	142.251.20.95Google · CDN	United States	AS15169Google LLC
4	13.226.244.9Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
4	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
4	192.178.183.94Google · CDN	United States	AS15169Google LLC
4	146.75.120.84Fastly · CDN	Frankfurt am Main, Hesse, Germany	AS54113Fastly, Inc.
4	93.152.213.180	Netherlands	AS207043Dedik Services Limited
4	52.92.251.96Aws · CLOUD	Boardman, Oregon, United States	AS16509Amazon.com, Inc.
4	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
89	18	-	-