Security Scan: brightonwp.com

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/ebb3d01b-b979-4ee6-a8d6-5f54edcf733d Domain and IP registration (RDAP)/api/v1/rdap/ebb3d01b-b979-4ee6-a8d6-5f54edcf733d Certificate Transparency/api/v1/ct/brightonwp.com How often this domain was scanned/api/v1/domain/stats/brightonwp.com Scan history for this domain/api/v1/domain/history/brightonwp.com?limit=15

This website contacted 18 IPs in 1 country across 17 domains to perform 39 HTTP transactions. The main domain is brightonwp.com and was registered 10 years ago.

Submitted URL: https://brightonwp.com/

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Established WordPress blog compromised and injected with the DarkSword iOS exploit kit: fake 'captcha' gate pushing a clipboard/run-dialog command to install the Coruna wallet stealer. Confirmed by kit roster, CRITICAL YARA and IDS. Avoid; do not follow its instructions.

Risk Factors (5)

Known malicious exploit kit (DarkSword iOS / Coruna wallet stealer) confirmed by analyst-vetted kit roster on both AST-identical JS and HTML body

CRITICAL YARA rule match for the fake-captcha exploit gate

Social engineering instructing victims to open a run dialog and paste/execute clipboard content

Multiple CRITICAL IDS alerts for exploit-kit delivery and EtherHiding exfiltration

Calls to unranked suspicious third-party domains and blockchain RPC endpoints consistent with wallet-stealer infrastructure

Domain age information unavailable

Details

Page Title

brightonwp.com

Scan Type

public

Favicon Hash

MMH3: 1198047028

MD5: 000bf649cc8f6bf27cfb04d1bcdcd3c7

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'brightonwp.com' is registered with no subdomain. The second-level label 'brightonwp' is 10 characters long split between two vowels and 8 consonants. Word splitting yields 2 words: brighton, wp. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

7.34s

Total Load Time

595 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:659 chars

Detector Agreement:100%

Website Classification

Primary Category

blog personal website92% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

blog personal website

92%

technology software

88%

adult content

77%

social media network

68%

documentation technical

64%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	138.197.217.214	Santa Clara, California, United States	AS14061DigitalOcean, LLC
2	104.21.32.211Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.20.24.117Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	15.197.152.159Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	35.71.129.99Aws · CLOUD	United States	AS16509Amazon.com, Inc.
2	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
39	18	-	-