Security Report: theflb.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/aaf48b4e-afbd-4c7e-8b07-3205cc47cdc5 Domain and IP registration (RDAP)/api/v1/rdap/aaf48b4e-afbd-4c7e-8b07-3205cc47cdc5How often this domain was scanned/api/v1/domain/stats/theflb.com Scan history for this domain/api/v1/domain/history/theflb.com?limit=15

This website contacted 12 IPs in 2 countries across 11 domains to perform 30 HTTP transactions. The main domain is theflb.com and was registered 14 years ago.

Submitted URL: https://theflb.com

Effective URL:

https://www.theflb.com/

Redirected

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised WordPress site serving a fake Cloudflare 'Human Verification' ClickFix overlay plus an injected ErrTraffic/Exvicy loader; YARA, IDS and multi-feed threat intel confirm malware delivery. Do not interact.

Risk Factors (5)

Fake Cloudflare 'Human Verification' / ClickFix overlay instructing Windows users to paste attacker PowerShell into Terminal

Obfuscated injected WordPress loader (ErrTraffic/Exvicy) decoded and executed via Function constructor

Exploit-Kit and ClickFix command domains contacted at runtime (cloudflare-check.net, interseq.at, checkyoubrowse.codes, gateway.tenderly.co)

EtherHiding exfiltration alerts (7x) and blockchain RPC abuse for payload retrieval

Compromised established domain used as malware delivery vehicle

Domain age information unavailable

Details

Page Title

Home - Financial Legacy Builders

Scan Type

public

Domain Name Analysis

You're looking at domain 'theflb.com' on the commercial generic top-level domain (.com) while skipping any subdomain. The registrable portion 'theflb' spans 6 characters with one vowel and five consonants. It segments into 3 words: the, fl, b. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

14.96s

Total Load Time

788 KB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:944 chars

Detector Agreement:67%

Website Classification

Primary Category

technology software54% confidence

Type: dynamic

Method: ml+structural

All Detected Categories

technology software

54%

cryptocurrency blockchain

46%

finance banking

33%

documentation technical

33%

corporate

25%

Detected Features

OG: website

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	45.79.38.60	Richardson, Texas, United States	AS63949Akamai Connected Cloud
2	142.251.110.95Google · CDN	United States	AS15169Google LLC
2	172.67.70.207Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	150.136.141.142Oracle · CLOUD	Ashburn, Virginia, United States	AS31898Oracle Corporation
2	142.251.14.94Google · CDN	United States	AS15169Google LLC
2	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
2	104.21.3.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.250.154.94Google · CDN	United States	AS15169Google LLC
30	12	-	-