Security Scan: Ficohsa

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/11737216-ee08-4579-84c4-1541d03d039f Domain and IP registration (RDAP)/api/v1/rdap/11737216-ee08-4579-84c4-1541d03d039f Certificate Transparency/api/v1/ct/ficofacil.com How often this domain was scanned/api/v1/domain/stats/ficofacil.com Scan history for this domain/api/v1/domain/history/ficofacil.com?limit=15

This website contacted 11 IPs in 1 country across 8 domains to perform 26 HTTP transactions. The main domain is ficofacil.com and was registered 18 years ago.

Submitted URL: https://ficofacil.com/

AI Security Verdict

High Risk

Confidence: 78%

Risk Score

Well-aged domain but flagged as a malware loader on the primary domain and shows a CRITICAL ET MALWARE EtherHiding exfiltration alert plus blockchain RPC traffic — treat as compromised/malicious despite having no forms.

Risk Factors (5)

Malware-typed Indicators of Compromise match on the primary domain (unknown loader)

CRITICAL IDS alert ET MALWARE EtherHiding Exfil M2 (blockchain-based malware exfiltration)

Blockchain RPC domain (gateway.tenderly.co) contacted via DNS and TLS SNI, characteristic of EtherHiding infrastructure

Unranked domain (not in Cisco Umbrella top 1M) claiming/using the Ficohsa brand name in its title

Third-party script loaded from low-reputation domain zvh3.com

Domain age information unavailable

Details

Page Title

Ficohsa

Scan Type

public

Favicon Hash

MMH3: 187710070

MD5: 8fa84e168c95920327a446c57968ff69

Domain Name Analysis

The domain name 'ficofacil.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. Its registrable label 'ficofacil' stretches across 9 characters split between four vowels and five consonants. It segments into three words: fico, fac, il. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

2.36s

Total Load Time

361 KB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:105 chars

Detector Agreement:50%

Website Classification

Primary Category

documentation technical33% confidence

Type: dynamic

Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical

33%

finance banking

32%

healthcare medical

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
6	172.67.207.51Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	172.217.208.95Google · CDN	United States	AS15169Google LLC
2	104.18.94.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	104.17.25.14Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	142.251.13.94Google · CDN	United States	AS15169Google LLC
2	104.21.61.68Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	104.18.95.41Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
2	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
2	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
26	11	-	-