Security Scan Report: elitebinary.net

Site favicon
Submitted: Completed: publiccompleted
This website contacted 12 IPs in 3 countries across 12 domains to perform 138 HTTP transactions. The main domain is elitebinary.net and was registered 1 year 3 months ago.

Submitted URL: https://elitebinary.net

AI Security Verdict

Confirmed Scam

Confidence: 97%

10
Risk Score

Compromised WordPress page injected with the ErrTraffic/Exvicy ClickFix loader: hunting rule-confirmed obfuscated payload, EtherHiding via blockchain RPC, Safe Browsing and ClearFake hits. No forms, but it delivers malware.

Risk Factors (6)
Known malicious ErrTraffic/Exvicy ClickFix loader injected into the page (analyst-vetted kit roster, CRITICAL)
High-precision hunting-rule hit for obfuscated Base64/XOR loader executed through new Function
EtherHiding: script retrieves its next stage from a blockchain smart contract (ET MALWARE EtherHiding Exfil M2, CRITICAL)
ClearFake / malware threat-intel matches on the primary domain and URL, plus multiple ClearFake-linked third-party resource domains
Google Safe Browsing Unwanted Software detection
Looks like a compromised WordPress site serving attacker-controlled script (unranked script host frclau.com)
Domain age information unavailable

Details

Page Title

Elite Binary

Scan Type

public

Domain Name Analysis

You're looking at domain 'elitebinary.net' on the network infrastructure generic top-level domain (.net) while skipping any subdomain. Its registrable label 'elitebinary' stretches across 11 characters split between five vowels and six consonants. Splitting it apart reveals 2 words: elite, binary. The median word length lands at 5.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

M2 acrovvriare r elitebinary.net Verify you are human by completing the action below. elitebinary.net needs to review the security of your connection before proceeding. (( & Encrypted ]{ @ war [©...

Page Load Overview

0.35s
Total Load Time
1020 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,165 chars
Detector Agreement:100%

All Detected Languages

🇺🇸en(97%)🇩🇪de(3%)

Website Classification

Primary Category

gambling betting58% confidence
Type: spa
Method: ml+structural

All Detected Categories

gambling betting
58%
finance banking
46%
education learning
43%
blog personal website
39%
e-commerce shopping
38%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
10192.113.23.119Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
16193.178.159.12Roubaix, Hauts-de-France, France
AS218974Ufo Technologies Limited
11142.250.154.94Google · CDNUnited States
AS15169Google LLC
1192.113.16.153Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
11142.251.127.95Google · CDNUnited States
AS15169Google LLC
1192.113.23.235Frankfurt am Main, Hesse, Germany
AS47583Hostinger International Limited
11142.251.14.94Google · CDNUnited States
AS15169Google LLC
5192.0.77.48San Francisco, California, United States
AS2635Automattic, Inc
4192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
1192.178.183.95Google · CDNUnited States
AS15169Google LLC
13812--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T128D3E97176590CB6216F83CFA50B331CA4CADAD5D602A1F9F4F79018A1E8DF536A370A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:JtRUYdo/iXFk+fk6kYOk0Z/JkTQv+ZouvemlUYugaLmU3sLD6sQ0LwJ4Ya0V8a8d:XRHdx3HoN2nZouvemlUYugaLmU3sLD6Y

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:135609:EEsBITAZqAqumJBkKVpCmnwJKugMkEAEBkgwKQWoDQIAaCRABEQBAEBAQGOWK4oCYQQaZACAICQWggblKIAFHjAhyVKAzLDq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00f64fcfffdf477f
Perceptual Hash:915544d74779398e
Difference Hash:84a4931a6a1084c0
Wavelet Hash:007c4b5b7b5b3f01
Color Hash:07200030000

Other Hashes

Crop Resistant:84a4931a6a1084c0

Scan History

Scan history not available

Unable to load historical scan data