Security Scan Report: cocinasjmcasal.com

Site favicon
Submitted: Completed: publiccompleted
This website contacted 9 IPs in 5 countries across 9 domains to perform 160 HTTP transactions. The main domain is cocinasjmcasal.com and was registered 6 years ago.

Submitted URL: https://cocinasjmcasal.com/

AI Security Verdict

High Risk

Confidence: 88%

9
Risk Score

Legitimate-looking Spanish kitchen business whose page loads four TA2726 exploit-kit/malware TDS domains, confirmed by CRITICAL IDS alerts and Safe Browsing; treat as compromised and avoid.

Risk Factors (4)
Four distinct TA2726 malware/exploit-kit TDS domains loaded as third-party resources
CRITICAL IDS exploit-kit alerts for DNS lookups and TLS SNI to those domains
Google Safe Browsing Unwanted Software detection
Domain is unranked in Cisco Umbrella and shows low business-legitimacy signals (30/100)
Domain age information unavailable

Details

Page Title

COCINAS – Calidad, Experiencia

Scan Type

public

Domain Name Analysis

You're looking at domain 'cocinasjmcasal.com' on the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'cocinasjmcasal' is 14 characters long with five vowels and nine consonants. Tokenizing the label suggests seven words: co, c, in, as, j, m, casal. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

Screenshot

Cage HOME CONTACTO Sl HLS LEON: | Pat

Page Load Overview

90.36s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:444 chars
Detector Agreement:50%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2482.98.178.139Madrid, Madrid, Spain
AS42612DinaHosting S.L.
17142.251.14.95Google · CDNUnited States
AS15169Google LLC
1763.185.90.13Aws · CLOUDFrankfurt am Main, Hesse, Germany
AS16509Amazon.com, Inc.
1713.40.19.52Aws · CLOUDCity of London, England, United Kingdom
AS16509Amazon.com, Inc.
17188.114.97.3Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17104.248.202.189Amsterdam, North Holland, Netherlands
AS14061DigitalOcean, LLC
172.58.65.235Frankfurt am Main, Hesse, Germany
AS44051Fornex Hosting S.L.
17172.67.217.202Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
17104.21.94.4Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1609--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E3B31662FB421453013B4BCBB1D7B75C40A99613CA460CF9B2F542DDCAF5EB123AA35A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:5T3V3TUNXSqn+T/MP0l7GF+iF/pFUO4Lr2kdnhOG:13V3YN8GF+i8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:116691:yKzb2IBAYHGWCTE4sgYjSgKpRACAxGFPGERMYIACgAQKQBKohiGIhkuyQDQGICgnAMSYU0IYG5B8t7AFgcBjNhtCAERsRtQk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data