Security Scan Report: choicepropertynetwork.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 22 IPs in 2 countries across 14 domains to perform 184 HTTP transactions. The main domain is choicepropertynetwork.com and was registered 4 years 3 months ago.

Submitted URL: https://choicepropertynetwork.com

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Compromised WordPress site: analyst-vetted ErrTraffic/Exvicy malicious loader injected in the page, CRITICAL EtherHiding exfiltration IDS alerts, and a loaded exploit-kit/malware domain. Avoid all interaction.

Risk Factors (5)
Known malicious injection kit (ErrTraffic/Exvicy) present in page HTML per analyst-vetted YARA roster
CRITICAL IDS alerts for EtherHiding malware exfiltration (x2)
Blockchain RPC connections consistent with EtherHiding malware C2/exfiltration
Primary domain flagged as malware loader in threat intelligence
Page loads an exploit-kit domain (lovezramexar.info, 'clearfake-1', corroborated by multiple feeds) and a malware-flagged IP (158.94.208.87)
Domain age information unavailable

Details

Page Title

Choice Property Network

Scan Type

public

Domain Name Analysis

Domain 'choicepropertynetwork.com' uses the commercial generic top-level domain (.com) with no subdomain. The registrable portion 'choicepropertynetwork' spans 21 characters containing seven vowels alongside 14 consonants. Splitting it apart reveals three words: choice, property, network. Median word length comes out to 7 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://choicepropertynetwork.com

Page Load Overview

75.12s
Total Load Time
43.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,892 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content53% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
53%
healthcare medical
36%
real estate property
28%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
16160.153.0.111Cloudflare · CDNUnited States
AS209242Cloudflare London, LLC
8142.251.20.95Google · CDNUnited States
AS15169Google LLC
823.207.210.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
8188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.14.94Google · CDNUnited States
AS15169Google LLC
8142.251.154.4Google · CDNUnited States
AS15169Google LLC
823.207.210.148Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
8188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8142.251.150.4Google · CDNUnited States
AS15169Google LLC
8172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
18422--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FA1473217E5A283A316F13CF9017334C9097EFF6D6A197EEF1B64120A2B5D9037932A5

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:+VHC5DQqaRjQpaJsmUX4s940u38OC9vBDTCyFDaqGGSjVtX3q3KyEo6uqujaR3hL:yHRjBUX4s94B

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:200711:KOwIKNGpMTooZaCElDLCJUIAiABOmwCCCmsJXDEQQYQZORA4lkixREyBGigGEjqcsjALIHgjeED6EVCiG2FUUAoASClFAgGA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffff10b038b00000
Perceptual Hash:cf9190ce186a3e2f
Difference Hash:f8f4755171654145
Wavelet Hash:ffff38f8b8b02000
Color Hash:#b0d279

Scan History

Scan history not available

Unable to load historical scan data