Security Scan Report: greenbuildingfl.com

Site favicon
Submitted: Sep 16, 2026, 1:47:34 AMCompleted: Sep 16, 2026, 1:48:26 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Compromised green-building WordPress blog repurposed as gambling SEO spam and delivering malware/exploit-kit activity (EtherHiding exfil, ErrTraffic cluster) per CRITICAL IDS alerts and threat-intel IoCs. Avoid.

Risk Factors
Critical IDS malware alerts (EtherHiding exfiltration, ErrTraffic exploit kit check-in)
Indicators of Compromise on primary domain ('unknown loader' malware)
Multi-source malware IoCs on third-party resources loaded by the page (aleverifocation.beer, cloudflare-check.net)
Blockchain RPC / wallet-related network calls consistent with EtherHiding malware
Compromised WordPress site repurposed for gambling/casino SEO spam injection
Domain age information unavailable

Details

Page Title

Greenbuildingfl - Building a Sustainable Future

Scan Type

public

Domain Name Analysis

Domain 'greenbuildingfl.com' uses the commercial generic top-level domain (.com). Count 15 characters in 'greenbuildingfl' holding five vowels versus 10 consonants. Tokenizing the label suggests three words: green, building, fl. Expect 5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://greenbuildingfl.com

Page Load Overview

24.00s
Total Load Time
982 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:33,618 chars
Detector Agreement:80%

Website Classification

Primary Category

entertainment media89% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
89%
gambling betting
85%
technology software
72%
finance banking
60%
education learning
60%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
592.113.16.91Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
3142.251.110.95Google · CDNUnited States
AS15169Google LLC
3192.0.73.2San Francisco, California, United States
AS2635Automattic, Inc
3104.20.24.117Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
392.113.16.160Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
3192.178.183.94Google · CDNUnited States
AS15169Google LLC
3192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
3142.251.14.95Google · CDNUnited States
AS15169Google LLC
392.113.23.25Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
3142.250.154.94Google · CDNUnited States
AS15169Google LLC
3812--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19882C732905408527F4E97ACC0F6731AEA789629CE0AB7B674F4716C8DA98F340F761D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:GFwmSE4Bltd3WE0wgPr3ZdqZUaAWkWuZ7:GFwmKZ0LZdapzu1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18447:gXgEEQCyegFegAI8cOA9wFEQIGFAWGAGACGsEChs4ARiYAwMWGLCgRtMBMhwGVYuEUTWwE0YIALxCCIA5HSCsAEFeGDgaiIC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0001010101010101
Perceptual Hash:aa5555557755dc04
Difference Hash:0001010909010101
Wavelet Hash:0e0f1f0f0d1d0f0f
Color Hash:#5dac53

Other Hashes

Crop Resistant:0001010909010101

Scan History

Scan history not available

Unable to load historical scan data