Security Report: gegintl.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/14b7aec8-1e34-41aa-b345-50077f4c7162 Domain and IP registration (RDAP)/api/v1/rdap/14b7aec8-1e34-41aa-b345-50077f4c7162How often this domain was scanned/api/v1/domain/stats/gegintl.com Scan history for this domain/api/v1/domain/history/gegintl.com?limit=15

This website contacted 19 IPs in 1 country across 5 domains to perform 169 HTTP transactions. The main domain is gegintl.com and was registered 18 years ago.

Submitted URL: https://gegintl.com

AI Security Verdict

High Risk

Confidence: 80%

Risk Score

Established Abu Dhabi engineering firm whose site appears compromised: an obfuscated script uses EtherHiding (blockchain-stored payload address) and hides threat-listed hosts. No credential forms, but visitors load a malware loader.

Risk Factors (4)

Obfuscated loader script with blockchain-based (EtherHiding) second-stage resolution

Threat-feed-listed hosts hidden inside decoded script, including a Binance Chain seed node tagged as Vidar malware

Domain flagged as a malware loader in a threat-intelligence feed

Indicators of a compromised WordPress installation serving injected malicious script to every visitor

Domain age information unavailable

Details

Page Title

Green Energy - Green Energy Group (GEG) | Official Website

Scan Type

public

Favicon Hash

MMH3: 360120857

MD5: 366714dde9bfa20e4a5c8a7b50dcc151

Domain Name Analysis

You're looking at domain 'gegintl.com' on the commercial generic top-level domain (.com) with no subdomain. Its registrable label 'gegintl' stretches across 7 characters containing two vowels alongside 5 consonants. Word splitting yields 4 words: ge, g, in, tl. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.14s

Total Load Time

8.1 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:14,743 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical39% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

39%

news media journalism

36%

corporate

35%

cryptocurrency blockchain

33%

government public service

33%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
25	67.20.113.14	Phoenix, Arizona, United States	AS31898Oracle Corporation
8	142.251.14.95Google · CDN	United States	AS15169Google LLC
8	142.251.154.119Google · CDN	United States	AS15169Google LLC
8	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
8	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	104.20.46.180Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
169	19	-	-