Security Scan Report: dentalmora.com

Site favicon
Submitted: Sep 20, 2026, 9:47:27 PMCompleted: Sep 20, 2026, 9:48:20 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Legitimate Dental Mora clinic site that appears compromised: CRITICAL IDS alerts for EtherHiding malware exfiltration, a stealer-malware threat-intel hit on the domain, and malicious third-party resources (1rpc.io, xaz2.com).

Risk Factors
CRITICAL network IDS alert indicating active malware exfiltration (EtherHiding)
Threat-intel match on the primary domain (stealer malware, unverified single source)
Malicious third-party resources loaded from page (1rpc.io, xaz2.com)
Blockchain RPC lookups consistent with fileless/blockchain C2 abuse
Domain age information unavailable

Details

Page Title

Clínica Dental en Badalona | Dentistas | Dental Mora

Scan Type

public

Domain Name Analysis

Domain 'dentalmora.com' uses the commercial generic top-level domain (.com) without a subdomain. Count 10 characters in 'dentalmora' containing four vowels alongside six consonants. It segments into 2 words: dental, mora. Median word length comes out to five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://dentalmora.com

Page Load Overview

6.58s
Total Load Time
2.8 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es
Text Length:15,915 chars
Detector Agreement:80%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
14164.138.208.67Spain
AS198968Cyberneticos Hosting SL
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
513.33.187.110Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
5142.250.154.95Google · CDNUnited States
AS15169Google LLC
5188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
513.33.187.25Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
5142.251.110.97Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5146.19.24.104Poland
AS201814MEVSPACE sp. z o.o.
5104.18.18.62Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
7914--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16BF3B5527D035118713F952BA093F9AC753079C8C25A92EAF876603BE4B8F9537F360A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:9iCZXypHEw4dyKS5hZzuC8a5v8MIVwR4DQJuJx:5Zipz4dyKS5Jv8MIVwR4DQJuJx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:157514:ZWOgAKYEFSFIiEBGUeYAGoAhIPItpIBjCA5AiBQASoATDYtS1AsTJ7UKAoiDEGUAzDCDmgYFCkrGQDEMAC7ClHgBnkDeAZSg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dffff1d191f1f3ff
Perceptual Hash:ed92926c3c616d96
Difference Hash:303233332323032a
Wavelet Hash:9ffb918191f1f180
Color Hash:#bf4062

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data