Security Scan Report: www.green-ard.com

Site favicon
Submitted: Oct 1, 2026, 1:36:06 PMCompleted: Oct 1, 2026, 1:37:11 PMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 95%

10
Risk Score

Compromised Green Ard storefront serving an analyst-confirmed ClickFix kit: fake Cloudflare 'Human Verification' overlay that lures Windows users into pasting a Terminal/PowerShell command, with CRITICAL EtherHiding exfiltration IDS alerts and multi-source malware threat-intel hits. Do not visit.

Risk Factors (5)
Injected ClickFix 'Human Verification' overlay that social-engineers users into executing a PowerShell payload
Fake Cloudflare verification UI (brand impersonation of Cloudflare) with Ray ID and step-by-step Terminal instructions
EtherHiding malware exfiltration over blockchain RPC endpoints (polygon.drpc.org, polygon-bor-rpc.publicnode.com)
Multi-source threat-intel match on the scanned URL and domain marked as malware/clickfix
Unranked third-party script host browseid.codes serving JavaScript to the page
Domain age information unavailable

Details

Page Title

Green Ard - Eco-Friendly Products for a Greener Tomorrow

Scan Type

public

Domain Name Analysis

Domain 'www.green-ard.com' uses the commercial generic top-level domain (.com) with subdomain 'www'. Count 9 characters in 'green-ard' containing 3 vowels alongside five consonants, plus 1 hyphen. Word splitting yields two words: green, ard. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.green-ard.com/

Page Load Overview

5.23s
Total Load Time
4.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,312 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical65% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
65%
corporate business
61%
government public service
52%
corporate
35%
adult content
31%

Detected Features

Login Form
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
1170.40.216.191Phoenix, Arizona, United States
AS46606Unified Layer
11172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11192.178.170.95Google · CDNUnited States
AS15169Google LLC
11142.251.14.97Google · CDNUnited States
AS15169Google LLC
11104.18.11.59Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
11142.251.110.94Google · CDNUnited States
AS15169Google LLC
11216.239.32.36Google · CDNUnited States
AS15169Google LLC
1115.197.148.33Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
1174.125.29.95Google · CDNUnited States
AS15169Google LLC
14313--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F144F7A2F55804AB213F49C98059B35CF86AE662D7831AE4F0FDA33957CDDE2355322C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:yoSdMHRS5c5APOAiAxfArjqPJMOjAANmfVaMgc7sHm7FHRfg9lPTKEskaCeUQGwS:y3rXK5ANmfVaMgc7sHm7FHRfg9xTKEsK

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:263058:IIQCIIMCIipAGMjzqMCAQQwEUExEUx5S5JA0IhoCiCkSjCeACxVYBKYRLQWiJ3ZcAXlAvgKkgiAIB0QCQUcUgJKA5RmDgYpA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff09090101ffff81
Perceptual Hash:aa0bf4c534973c99
Difference Hash:49f97b5bd3e70d2d
Wavelet Hash:ff09090101ffff81
Color Hash:#2d864f

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data