Security Report: homeservicebuilders.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c64cfdff-d114-4d3a-a99a-1783c4199a8f Domain and IP registration (RDAP)/api/v1/rdap/c64cfdff-d114-4d3a-a99a-1783c4199a8fHow often this domain was scanned/api/v1/domain/stats/homeservicebuilders.com Scan history for this domain/api/v1/domain/history/homeservicebuilders.com?limit=15

This website contacted 31 IPs in 6 countries across 20 domains to perform 66 HTTP transactions. The main domain is homeservicebuilders.com and was registered 6 years ago.

Submitted URL: https://homeservicebuilders.com

AI Security Verdict

Confirmed Scam

Confidence: 90%

Risk Score

Legitimate Miami contractor site that has been compromised: it injects a ClickFix 'Human Verification' overlay and EtherHiding blockchain-hosted malware (9 CRITICAL IDS alerts, ClearFake IoCs). Visitors risk malware infection — avoid.

Risk Factors (4)

Injected ClickFix / fake 'Human Verification' overlay directing Windows users to paste commands into Terminal

EtherHiding payload retrieval via blockchain smart contracts (Polygon RPC endpoints) — 9 CRITICAL IDS malware alerts

Primary domain listed in threat intelligence as ClearFake; loaded resource domain interseq.at flagged as ClearFake exploit kit by 3 feeds

Legitimate business site compromised to serve malware to visitors

Domain age information unavailable

Details

Page Title

MCH Home Service Builders | General Contractor & Plumbing — Miami, FL

Scan Type

public

Favicon Hash

MMH3: 1637723302

MD5: 8afd57490d87705827da48b29544dd62

Domain Name Analysis

Domain 'homeservicebuilders.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'homeservicebuilders' is 19 characters long split between 8 vowels and eleven consonants. Tokenizing the label suggests three words: home, service, builders. The median word length lands at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.10s

Total Load Time

7.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:5,408 chars

Detector Agreement:100%

Website Classification

Primary Category

documentation technical37% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

37%

government public service

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	162.241.216.164	Phoenix, Arizona, United States	AS31898Oracle Corporation
2	142.251.110.95Google · CDN	United States	AS15169Google LLC
2	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
2	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
2	188.114.96.3Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	34.254.40.61Aws · CLOUD	Dublin, Leinster, Ireland	AS16509Amazon.com, Inc.
2	3.171.214.44Cloudfront · CDN	United States	AS16509Amazon.com, Inc.
2	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	185.7.214.119	Harlesden, England, United Kingdom	AS55286B2 Net Solutions Inc.
66	31	-	-