Security Scan: Smarter Construction Starts with Scalable Tec

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/8d6e9e57-b572-4b92-ae95-ead7fa7105a2 Domain and IP registration (RDAP)/api/v1/rdap/8d6e9e57-b572-4b92-ae95-ead7fa7105a2How often this domain was scanned/api/v1/domain/stats/constructionsmarttek.com Scan history for this domain/api/v1/domain/history/constructionsmarttek.com?limit=15

This website contacted 28 IPs in 2 countries across 12 domains to perform 107 HTTP transactions. The main domain is constructionsmarttek.com and was registered 1 year 3 months ago.

Submitted URL: https://constructionsmarttek.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate-looking construction site that has been compromised: injected ClickFix 'Human Verification' overlay plus an EtherHiding blockchain loader trick visitors into pasting PowerShell. Do not interact.

Risk Factors (7)

Known malicious ClickFix kit (clickfix-winx-overlay-2026-10) injected into the page (kit roster + 2 CRITICAL YARA rules)

EtherHiding loader retrieving stage-2 host from a Polygon smart contract

IDS CRITICAL ET MALWARE EtherHiding Exfil alerts on the session

Obfuscated script hiding known-attacker hosts (1rpc.io, polygon.gateway.tenderly.co)

Threat-intel flagged script domain cloud-browse.codes (3 feeds) loaded by the page

Primary domain reported as 'iclickfix' malware (single-source)

Social-engineering overlay inducing users to paste PowerShell into Terminal

Domain age information unavailable

Details

Page Title

Smarter Construction Starts with Scalable Technology Solutions

Scan Type

public

Favicon Hash

MMH3: 1351118864

MD5: d28356ad708722dce992943d0c785f3c

Domain Name Analysis

The domain 'constructionsmarttek.com' uses the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'constructionsmarttek' stretches across 20 characters split between 6 vowels and 14 consonants. It segments into 3 words: construction, smart, tek. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.76s

Total Load Time

4.0 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:12,626 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical38% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

38%

corporate

35%

news/blog

20%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
26	50.6.226.204	Ashburn, Virginia, United States	AS31898Oracle Corporation
3	142.251.14.95Google · CDN	United States	AS15169Google LLC
3	142.251.110.97Google · CDN	United States	AS15169Google LLC
3	142.251.156.119Google · CDN	United States	AS15169Google LLC
3	104.26.4.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	142.251.14.94Google · CDN	United States	AS15169Google LLC
3	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
3	216.239.32.36Google · CDN	United States	AS15169Google LLC
3	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
3	142.251.110.95Google · CDN	United States	AS15169Google LLC
107	28	-	-