Security Scan Report: greenpaintingco.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 18 IPs in 4 countries across 9 domains to perform 139 HTTP transactions. The main domain is greenpaintingco.com and was registered 6 months ago.

Submitted URL: https://greenpaintingco.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Legitimate-looking Denver painting site compromised with an injected ClickFix/AMOS stealer loader; analyst-vetted kit roster, CRITICAL IDS malware alert and a malicious third-party script host make it unsafe to visit.

Risk Factors (5)
Known malicious ClickFix/AMOS stealer loader injected into page HTML (analyst-vetted kit identification)
CRITICAL IDS malware alert for AMOS loader script request
Primary domain flagged as malware in threat-intel feed
External malicious script host silverrogpuia.pro loaded by the page (multi-feed corroborated)
Compromised-site pattern used to deliver fake bot-protection ClickFix prompts to macOS visitors
Domain age information unavailable

Details

Page Title

Top Painting Contractors in Denver CO | Local House Painters

Scan Type

public

Domain Name Analysis

The domain name 'greenpaintingco.com' uses the commercial generic top-level domain (.com) and has no subdomain. The registrable portion 'greenpaintingco' spans 15 characters with 6 vowels and nine consonants. Segmentation suggests 3 words: green, painting, co. Median word length comes out to 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Home AboutUs Services » Portfolio v Our Locations v Contact Your Phone Email Select Service ’ years fixing what the a ide,.sun, an Denver Climate Workmansh suited to the imate, prt against FrontRa...

Page Load Overview

10.15s
Total Load Time
40.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:10,267 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical65% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
65%
adult content
61%
government public service
35%
education learning
28%
corporate
25%

Detected Features

Search
Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2091.108.97.218Manchester, England, United Kingdom
AS47583Hostinger International Limited
7192.178.183.97Google · CDNUnited States
AS15169Google LLC
7147.45.37.168Russia
AS203273NetCrafters OU
7142.251.156.119Google · CDNUnited States
AS15169Google LLC
7192.178.183.94Google · CDNUnited States
AS15169Google LLC
7142.251.157.120Google · CDNUnited States
AS15169Google LLC
7216.239.32.36Google · CDNUnited States
AS15169Google LLC
765.8.131.125Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
792.113.23.158Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
7142.251.157.119Google · CDNUnited States
AS15169Google LLC
13918--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14E348572BE42203E22BF45CF80076B1C71A2D3CACE9259C5B6FC4165D7F9DE17AA2158

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:oSxBDb1d2En7LQHhA/IV051t6woRR4zDmoMgNVSfpx:ljeE7LQBA/IV07kwoRo4

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:243811:CqDgVhUIAwKoKkIiyqY/AQYAs70RkBCCYCQPCQXQLYMCwAKbgA0bWFAAy4SGTgwAk3oiMAFJRjQEwYUiMAIHWNUEZBRsfwIo

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data