Security Scan Report: agspropertypoint.com

Site favicon
Submitted: Oct 8, 2026, 11:47:38 AMCompleted: Oct 8, 2026, 11:48:29 AMpubliccompleted

AI Security Verdict

Confirmed Scam

Confidence: 93%

9
Risk Score

Legitimate-looking real-estate site that has been compromised: it serves the analyst-vetted Macfinger ClickFix AMOS stealer loader, triggers a CRITICAL IDS malware alert, and hides malware-associated tracker domains in obfuscated scripts.

Risk Factors (5)
Compromised legitimate-looking real-estate page serving an analyst-vetted macOS AMOS stealer loader (ClickFix campaign)
Malicious JavaScript resource loaded from unranked third-party host trackerredirect.online and poalmcreorvelvet.pro
Injected SEO spam content promoting unlicensed online casinos (Polish/English gambling text unrelated to real estate)
Obfuscation hiding known malware C2/tracking domains inside page scripts
Two outbound links to domains reported as 'osx atomic' and 'android fakeapp' malware
Domain age information unavailable

Details

Page Title

agspropertypoint

Scan Type

public

Domain Name Analysis

You're looking at domain 'agspropertypoint.com' on the commercial generic top-level domain (.com) with no subdomain. Count 16 characters in 'agspropertypoint' holding 5 vowels versus eleven consonants. Splitting it apart reveals four words: a, gs, property, point. Median word length is 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://agspropertypoint.com

Page Load Overview

15.27s
Total Load Time
4.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:20,528 chars
Detector Agreement:50%

Website Classification

Primary Category

real estate property84% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
84%
adult content
25%
news/blog
20%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16118.139.180.147Singapore, Singapore
AS26496GoDaddy.com, LLC
10142.251.14.95Google · CDNUnited States
AS15169Google LLC
10193.29.224.97Helsinki, Uusimaa, Finland
AS210644Aeza Group LLC
10185.92.183.208Riga, Riga, Latvia
AS56971Cgi Global Limited
10142.251.14.94Google · CDNUnited States
AS15169Google LLC
10104.21.8.153Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
10142.251.127.84Google · CDNUnited States
AS15169Google LLC
103.167.230.19Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
10172.67.139.171Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10610--

Detected Technologies6

WordPressv7.1.3
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E0F3A6A27A462C29224F03CF9007360C50D7EFF8E761A5E5F9F6913066B5DA137F2299

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:lA0uT0ysYcsWXUnA3zfi2HRkIFy65aQ34S4bqyh0EaK7qEsYGh5ssi:xuXsYcsWvzfi2HiIFyQNi

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:166817:I4oAIRQTQgLQDDWBUShLJVElAUK1y4q0jPgaakQ2CAECiAEUMEUgCAlUoJV8MyjBaFCHRoCKJRMMIQAgIIwEoBsqEqNwwg+g

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fffffff7f3ffff
Perceptual Hash:e61b1b641f13643e
Difference Hash:348a581826262d12
Wavelet Hash:007c3f1f0301050d
Color Hash:#783a3c

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data