Security Report: novelproperties.co.uk - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/e5c33229-fb17-4b50-911f-8db1d1ed9d5d Domain and IP registration (RDAP)/api/v1/rdap/e5c33229-fb17-4b50-911f-8db1d1ed9d5dHow often this domain was scanned/api/v1/domain/stats/novelproperties.co.uk Scan history for this domain/api/v1/domain/history/novelproperties.co.uk?limit=15

This website contacted 20 IPs in 2 countries across 15 domains to perform 170 HTTP transactions. The main domain is novelproperties.co.uk and was registered 5 years ago.

Submitted URL: https://novelproperties.co.uk

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate real-estate site compromised and injected with a ClickFix fake 'Human Verification' lure that copies a PowerShell command to the clipboard; EtherHiding second-stage loader and critical malware IDS alerts.

Risk Factors (6)

ClickFix clipboard-injection malware overlay served from the site (shell command staged on clipboard)

Injected obfuscated script with EtherHiding blockchain-based dead-drop resolution to secondary payload hosts

Primary domain novelproperties.co.uk flagged as 'unknown loader' malware (single-source, unverified)

Six cross-domain redirects before landing, consistent with a compromised/injected site

IDS critical malware exfiltration alerts corroborate active malicious traffic

Page presents a fake 'security verification' / 'I am not a robot' prompt that instructs users to run a shell command

Domain age information unavailable

Details

Page Title

Novel Properties – Company Profile

Scan Type

public

Favicon Hash

MMH3: -1270879790

MD5: c9362c64e2b11792a5be5f6abf343bd0

Domain Name Analysis

The domain name 'novelproperties.co.uk' uses the United Kingdom country-code top-level domain (.co.uk) while skipping any subdomain. The core label 'novelproperties' covers 15 characters containing 6 vowels alongside 9 consonants. Tokenizing the label suggests 2 words: novel, properties. Average segment length settles at 7.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

18.85s

Total Load Time

4.9 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:6,695 chars

Detector Agreement:75%

Website Classification

Primary Category

real estate property99% confidence

Type: spa

Method: ml+structural

All Detected Categories

real estate property

99%

corporate business

45%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
18	63.250.35.88	United States	AS22612Namecheap, Inc.
8	142.251.20.95Google · CDN	United States	AS15169Google LLC
8	172.66.150.162Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	142.215.53.55	Washington, District of Columbia, United States	AS15830Equinix (EMEA) Acquisition Enterprises B.V.
8	3.33.196.84Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	3.33.155.121Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	52.223.48.152Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	15.197.198.189Aws · CLOUD	United States	AS16509Amazon.com, Inc.
8	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
8	142.251.14.94Google · CDN	United States	AS15169Google LLC
170	20	-	-