Security Scan Report: davidov-property.com

Redirected to:
https://davidov-property.com/bg/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 29 IPs in 2 countries across 12 domains to perform 102 HTTP transactions. The main domain is davidov-property.com and was registered 19 years ago.

Submitted URL: https://davidov-property.com

Effective URL:
https://davidov-property.com/bg/
Redirected

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Legitimate Bulgarian real-estate site apparently compromised: ClearFake Polygon/EtherHiding malware loader and injected casino spam detected, with a corroborated threat-intel hit. Do not browse or interact.

Risk Factors (4)
Analyst-vetted ClearFake malware kit (Polygon/EtherHiding contract loader) injected into the page
Threat-intelligence indicator on the primary domain corroborated by two independent feeds
Off-topic injected gambling/casino SEO text in Portuguese on an unrelated Bulgarian real-estate site
JavaScript obfuscation-related IDS hunting alerts (informational, consistent with injected loader)
Domain age information unavailable

Details

Page Title

Имоти в Сандански и региона - Davidov Property

Scan Type

public

Domain Name Analysis

The domain 'davidov-property.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 16 characters in 'davidov-property' holding five vowels versus ten consonants, plus one hyphen. Tokenizing the label suggests two words: davidov, property. Median word length is 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://davidov-property.com

Page Load Overview

2.13s
Total Load Time
5.2 MB
Total Size

Language Analysis

Primary Language

🇧🇬BG
Code: bg
Confidence:80%
Script:Unknown
Direction:ltr

Detection Details

HTML Lang Attribute:bg-bg
Text Length:4,414 chars
Detector Agreement:80%

Website Classification

Primary Category

entertainment media55% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

entertainment media
55%
gambling betting
46%
real estate property
39%
technology software
36%
documentation technical
30%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
18164.138.223.145Bulgaria
AS201200SuperHosting.BG Ltd.
3104.21.27.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3151.101.129.155Fastly · CDNUnited States
AS54113Fastly, Inc.
3142.251.20.97Google · CDNUnited States
AS15169Google LLC
3142.251.157.119Google · CDNUnited States
AS15169Google LLC
3172.67.142.245Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
3151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
3151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
3151.101.1.155Fastly · CDNUnited States
AS54113Fastly, Inc.
3142.250.154.102Google · CDNUnited States
AS15169Google LLC
10229--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19E71A423DB0D840C7111B285F6397794C14D562BEA2EDDA8B4E2063BFBD51D806E5F8E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:o8zGxnTt1rgcyPhhlqdqxqrqVEL5XCsSXtW1PotTG:obT75YXs1PotTG

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:3712:HAIEgAABRAwQiKACiIMEwEBAACAAAigAIU4CEQgBwQYAARhAEAFAAAAABjAACABIAgAAAIBAQDgUCAAIAowYCDxCBRAECICE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff001800ffffffff
Perceptual Hash:c018befe78589c87
Difference Hash:20d0f0f080000000
Wavelet Hash:df00000040ffffff
Color Hash:#40bf5e

Scan History

Scan history not available

Unable to load historical scan data