Security Scan Report: galiciacosmeticos.es

Site favicon
Submitted: Sep 19, 2026, 6:47:27 AMCompleted: Sep 19, 2026, 6:47:59 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Cosmetics reseller page carries a CRITICAL EtherHiding malware IDS alert, live blockchain RPC calls, and a malware-flagged third-party resource (xaz2.com). Infrastructure shows malware distribution despite benign content.

Risk Factors (5)
CRITICAL Suricata malware/EtherHiding exfiltration alert on this page
Live blockchain RPC connection consistent with EtherHiding malware loader
Malware-flagged external resource (xaz2.com) loaded by the page
Malware threat-intel indicator attached to the primary domain
Very new domain (15 days) with no established reputation
Domain age information unavailable

Details

Page Title

Galicia Cosméticos – Productos naturales Oriflame

Scan Type

public

Domain Name Analysis

Within the Spanish country-code top-level domain (.es), 'galiciacosmeticos.es' is registered with no subdomain. The second-level label 'galiciacosmeticos' is 17 characters long with 8 vowels and nine consonants. It segments into three words: galicia, cosmetic, os. Median word length is seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://galiciacosmeticos.es

Page Load Overview

12.91s
Total Load Time
1.2 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:1,547 chars
Detector Agreement:100%

Website Classification

Primary Category

blog personal website88% confidence
Type: spa
Method: ml+structural

All Detected Categories

blog personal website
88%
technology software
41%
finance banking
40%
education learning
39%
government public service
36%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13146.190.157.162Santa Clara, California, United States
AS14061DigitalOcean, LLC
10142.251.127.95Google · CDNUnited States
AS15169Google LLC
10104.26.12.152Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10142.250.154.94Google · CDNUnited States
AS15169Google LLC
535--

Detected Technologies6

WordPressv7.0.2
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1DEC331643C23D029B63F045FA14BF06C181C98CE996EDBE7F4585117E8FAEA673A0719

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:29i5Q62I/xE6x4g5bn/1J0DZdypGWqRD5ARS0z78xcW+JOKZ9GgL0+9hOPq9t0Vq:UiCHDypZqRDgj2UcJKr

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:120520:CVGkCTeRQFAJoBOGACTgBDABZADzJDMwkDApRioCSEgzRQ0BCJgMjQdD9QBwDCXGCAiQQECLCAAaSBL/CAEoEsGnAABKAABq

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f3a86879fffffff
Perceptual Hash:bc3ccccc8c3c363c
Difference Hash:22421c3c20400000
Wavelet Hash:9e00000181ffffff
Color Hash:#1f7293

Other Hashes

Crop Resistant:22421c3c20400000

Scan History

Scan history not available

Unable to load historical scan data