Security Report: gp-wrightconstruction.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/af3b5f63-9c65-443b-b477-b548894bc9b0 Domain and IP registration (RDAP)/api/v1/rdap/af3b5f63-9c65-443b-b477-b548894bc9b0 Certificate Transparency/api/v1/ct/gp-wrightconstruction.com How often this domain was scanned/api/v1/domain/stats/gp-wrightconstruction.com Scan history for this domain/api/v1/domain/history/gp-wrightconstruction.com?limit=15

This website contacted 9 IPs in 1 country across 8 domains to perform 68 HTTP transactions. The main domain is gp-wrightconstruction.com and was registered 18 years ago.

Submitted URL: https://gp-wrightconstruction.com

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Aged construction site that appears compromised: CRITICAL EtherHiding malware IDS alert, embedded Ethereum RPC exfil endpoint, a flagged third-party script host and a malware report on the primary domain. Do not interact; report.

Risk Factors

CRITICAL network IDS alert for malware (EtherHiding exfiltration)

Blockchain RPC endpoint (ethereum-sepolia-public.nodies.app) embedded on a non-crypto business site — hallmark of EtherHiding loader infrastructure

Threat-intel malware report against the primary domain

Malware-flagged third-party script host (xaz2.com, 2 feeds) loaded on the page

Domain age information unavailable

Details

Page Title

Excavation Contractors Hill County, TX | Pond Builder Texas | Wright Construction

Scan Type

public

Favicon Hash

MMH3: -1242281181

MD5: d6472424952eb78222a3b384d6ba9957

Domain Name Analysis

The domain name 'gp-wrightconstruction.com' uses the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'gp-wrightconstruction' stretches across 21 characters with 5 vowels and 15 consonants, notching one hyphen. Breaking it apart gives 3 words: gp, wright, construction. Expect six characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

8.30s

Total Load Time

5.6 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:9,905 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical74% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

74%

government public service

57%

blog personal website

53%

adult content

26%

corporate

25%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
12	209.87.159.26	United States	AS36444Liquid Web, L.L.C
7	13.33.187.28Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
7	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	216.239.32.36Google · CDN	United States	AS15169Google LLC
7	142.251.20.97Google · CDN	United States	AS15169Google LLC
7	104.18.19.183Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.251.14.94Google · CDN	United States	AS15169Google LLC
7	13.33.187.110Cloudfront · CDN	New York, New York, United States	AS16509Amazon.com, Inc.
68	9	-	-