Security Report: mghirealty.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8b5aaa88-3f51-4ae8-9fb1-c72778c7baed Domain and IP registration (RDAP)/api/v1/rdap/8b5aaa88-3f51-4ae8-9fb1-c72778c7baed Certificate Transparency/api/v1/ct/mghirealty.com How often this domain was scanned/api/v1/domain/stats/mghirealty.com Scan history for this domain/api/v1/domain/history/mghirealty.com?limit=15

This website contacted 11 IPs in 2 countries across 6 domains to perform 190 HTTP transactions. The main domain is mghirealty.com and was registered 18 years ago.

Submitted URL: https://mghirealty.com

AI Security Verdict

Confirmed Scam

Confidence: 93%

Risk Score

Compromised WordPress realty site serving EtherHiding/ClearFake malware via blockchain C2 (polygon.drpc.org) and ErrTraffic exploit-kit check-ins, with injected gambling SEO spam; flagged malicious by two independent feeds.

Risk Factors (5)

EtherHiding/ClearFake malware infrastructure (critically alerted by IDS)

ErrTraffic exploit-kit 'Beer Cluster' check-in traffic to flagged host aleverifocation.beer

Blockchain RPC (polygon.drpc.org) domain resolution via getDomain() used as malicious content sink

Primary domain mghirealty.com matched as malware in two independent threat feeds, plus a content-malware URL Indicator of Compromise

WordPress install compromised with injected off-topic gambling SEO spam (Turkish casino keywords unrelated to real estate)

Domain age information unavailable

Details

Page Title

My Global Hub International Realty – Real Estate with Global Vision

Scan Type

public

Favicon Hash

MMH3: -692091996

MD5: 5b37a3a77c32755fa52f0e88c168b5e7

Domain Name Analysis

Domain 'mghirealty.com' uses the commercial generic top-level domain (.com) without a subdomain. The core label 'mghirealty' covers 10 characters with 3 vowels and 7 consonants. Breaking it apart gives 3 words: mg, hi, realty. Median word length is 2 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

22.19s

Total Load Time

21.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:26,740 chars

Detector Agreement:25%

Website Classification

Primary Category

gambling betting99% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

99%

entertainment media

97%

real estate property

89%

government public service

80%

adult content

65%

Detected Features

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
20	92.113.23.163	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
17	13.226.244.31Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
17	142.251.13.95Google · CDN	United States	AS15169Google LLC
17	13.226.244.128Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
17	13.226.244.67Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
17	13.226.244.37Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
17	142.250.154.95Google · CDN	United States	AS15169Google LLC
17	104.18.11.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
17	142.251.13.94Google · CDN	United States	AS15169Google LLC
17	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
190	11	-	-