Security Report: greengovernadvisors.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/52da282a-37c5-4d9c-83b1-5ef45848b6c3 Domain and IP registration (RDAP)/api/v1/rdap/52da282a-37c5-4d9c-83b1-5ef45848b6c3How often this domain was scanned/api/v1/domain/stats/greengovernadvisors.com Scan history for this domain/api/v1/domain/history/greengovernadvisors.com?limit=15

This website contacted 8 IPs in 2 countries across 6 domains to perform 130 HTTP transactions. The main domain is greengovernadvisors.com and was registered 1 year 5 months ago.

Submitted URL: https://greengovernadvisors.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

Risk Score

Legitimate-looking ESG advisory site whose WordPress page has been compromised: an ErrTraffic/Exvicy loader and obfuscated EtherHiding script pull a next stage from a blockchain contract and contact flagged hosts. No credential forms, but visiting risks malware exposure.

Risk Factors (5)

Known malicious WordPress loader kit (ErrTraffic / Exvicy) injected into the page

EtherHiding second-stage retrieval via blockchain smart contract with exfiltration IDS signature

Obfuscated JavaScript concealing connections to threat-feed-listed hosts (1rpc.io, gateway.tenderly.co, polygon.drpc.org)

Compromised page loads fetch traffic to smtnscerver.beer, a host listed as malicious by three feeds

Blockchain RPC contact from an ESG advisory page with no legitimate Web3 purpose (wallet-drainer/loader pattern)

Domain age information unavailable

Details

Page Title

Green Govern Advisors – Green Govern Advisors

Scan Type

public

Favicon Hash

MMH3: -1020464070

MD5: 0fccc5b55b6bd28a3c0b485ab6811f62

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'greengovernadvisors.com' is registered while skipping any subdomain. Count 19 characters in 'greengovernadvisors' with seven vowels and 12 consonants. It segments into 3 words: green, govern, advisors. Average segment length settles at 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

11.94s

Total Load Time

11.2 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:6,082 chars

Detector Agreement:100%

Website Classification

Primary Category

government public service60% confidence

Type: spa

Method: ml+structural

All Detected Categories

government public service

60%

adult content

33%

news/blog

20%

Detected Features

Articles

Comments

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
18	63.250.43.9	United States	AS22612Namecheap, Inc.
16	63.250.43.10	United States	AS22612Namecheap, Inc.
16	142.251.13.97Google · CDN	United States	AS15169Google LLC
16	208.115.201.238	Frankfurt am Main, Hesse, Germany	AS46475Limestone Networks, Inc.
16	92.113.23.177	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
16	216.239.32.36Google · CDN	United States	AS15169Google LLC
16	92.113.16.124	Frankfurt am Main, Hesse, Germany	AS47583Hostinger International Limited
16	216.239.34.36Google · CDN	United States	AS15169Google LLC
130	8	-	-