Security Scan Report: a3roofingandpropertyspecialists.co.uk

Submitted: Completed: publiccompleted
This website contacted 31 IPs in 4 countries across 16 domains to perform 134 HTTP transactions. The main domain is a3roofingandpropertyspecialists.co.uk and was registered 5 years ago.

Submitted URL: https://a3roofingandpropertyspecialists.co.uk

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Genuine-looking roofing business site whose pages are compromised: it loads multi-source malware domains and triggers CRITICAL EtherHiding exfiltration alerts. Do not browse or submit data until cleaned.

Risk Factors (5)
CRITICAL IDS alerts for EtherHiding exfiltration (x2)
Multiple multi-source-corroborated PowerShell-injector malware domains loaded as page resources
BNB Smart Chain testnet domain contacted in DNS and TLS SNI, consistent with EtherHiding blockchain C2
Ethereum contract request traffic observed
Primary domain independently reported as malware-associated (single unverified feed)
Domain age information unavailable

Details

Page Title

Roofing, Renovations & Garden Rooms | A3 Roofing Worcester

Scan Type

public

Domain Name Analysis

Domain 'a3roofingandpropertyspecialists.co.uk' uses the United Kingdom country-code top-level domain (.co.uk) and has no subdomain. Count 31 characters in 'a3roofingandpropertyspecialists' split between eleven vowels and 19 consonants, notching one digit. Segmentation suggests 6 words: a, 3, roofing, and, property, specialists. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

A ROOFING & PROPERTY CONTACT US Now S STS PECIALI GG servicesv TESTIMONIALS GALLERY BLOGS CONTACT US & 07961 817 615 AS ROOFING AND PROPERTY SPECIALISTS 5-STAR RATED ACROSS SURREY |, TRUSTED BY HOM...

Page Load Overview

4.65s
Total Load Time
13.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:6,487 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate50% confidence
Type: spa
Method: structural

All Detected Categories

corporate
50%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1435.214.28.140Google · CDNCity of London, England, United Kingdom
AS15169Google LLC
4190.115.18.105United Arab Emirates
AS59692IQWeb FZ-LLC
4142.250.154.95Google · CDNUnited States
AS15169Google LLC
495.129.234.18Russia
AS57724Ddos-guard Ltd
4142.251.20.97Google · CDNUnited States
AS15169Google LLC
4142.251.157.119Google · CDNUnited States
AS15169Google LLC
4142.251.20.94Google · CDNUnited States
AS15169Google LLC
452.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
415.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
4142.251.127.148Google · CDNUnited States
AS15169Google LLC
13431--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19AC3D636F2940537139F03D6F059BB2C71A9DB45DA429EE072FC42AC4BC8ED604DB69A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:zvqz5Y7ehYOo8QyOEQ/snqYLmB+uNPMJw5jh8u+Nu3sDzJ:zr7e9JQyOH/i

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:123434:DmAgADIEQdy9mAhwhhDgACloEokgCQBEBCmKALHhFNwmAa0BiCgQAChUDYLbEAAiIoATQTHRIFxBZBBsCJQiSTAZwCwhyAFR

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0000030003ffffff
Perceptual Hash:a103dbcd3c74c30f
Difference Hash:c559dd1e37871e17
Wavelet Hash:0000070703ffffff
Color Hash:N/A

Scan History

Scan history not available

Unable to load historical scan data