Security Report: thefiremanconstruction.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/dcded53e-142c-4f8b-8a28-64bbac986247 Domain and IP registration (RDAP)/api/v1/rdap/dcded53e-142c-4f8b-8a28-64bbac986247 Certificate Transparency/api/v1/ct/thefiremanconstruction.com How often this domain was scanned/api/v1/domain/stats/thefiremanconstruction.com Scan history for this domain/api/v1/domain/history/thefiremanconstruction.com?limit=15

This website contacted 12 IPs in 2 countries across 10 domains to perform 110 HTTP transactions. The main domain is thefiremanconstruction.com and was registered 5 days ago.

Submitted URL: https://thefiremanconstruction.com

AI Security Verdict

Confirmed Scam

Confidence: 88%

Risk Score

Legitimate-looking construction site, but network traffic shows EtherHiding malware exfiltration signatures, blockchain RPC/drainer connections and a malicious CDN import — likely compromised. Avoid.

Risk Factors

CRITICAL network IDS signature for EtherHiding malware exfiltration (x13)

Live connections to blockchain RPC / contract endpoints from a construction company page

External resource from malicious CDN domain (entry-code-cdn.codes)

Indicators of Compromise against the primary domain (content-malware threat type)

Heavy use of Function() constructor code generation

Domain age information unavailable

Details

Page Title

The fireman Construction – Based in Simi Valley, CA Serving all of California

Scan Type

public

Favicon Hash

MMH3: -428291840

MD5: 68fcd0a8b4d6d461e8399c71dccc5e1d

Domain Name Analysis

Domain 'thefiremanconstruction.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 22 characters in 'thefiremanconstruction' split between eight vowels and 14 consonants. Segmentation suggests three words: the, fireman, construction. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

30.53s

Total Load Time

8.4 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:7,709 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service71% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

71%

adult content

45%

healthcare medical

36%

documentation technical

35%

corporate business

34%

Detected Features

Articles

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
11	23.92.26.197	Fremont, California, United States	AS63949Akamai Connected Cloud
9	104.17.208.5Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	104.18.11.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	104.18.10.59Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
9	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
9	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
110	12	-	-