Security Report: toldosortizrd.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/5d2a4a0d-7ac2-46de-a314-766ce6a5ddd4 Domain and IP registration (RDAP)/api/v1/rdap/5d2a4a0d-7ac2-46de-a314-766ce6a5ddd4How often this domain was scanned/api/v1/domain/stats/toldosortizrd.com Scan history for this domain/api/v1/domain/history/toldosortizrd.com?limit=15

This website contacted 31 IPs in 2 countries across 17 domains to perform 171 HTTP transactions. The main domain is toldosortizrd.com and was registered 8 years ago.

Submitted URL: https://toldosortizrd.com

Effective URL:

https://toldosortizrd.com/jarabacoa/

Redirected

AI Security Verdict

High Risk

Confidence: 92%

Risk Score

Compromised awning-business site. Analyst-vetted ClickFix 'Human Verification' kit plus EtherHiding blockchain loader, CRITICAL IDS malware alerts and a malware-flagged primary domain. Do not run any Terminal/verification prompt.

Risk Factors (5)

Known malicious kit (ClickFix WinX packed contract loader) injected into the page — WebAssembly/JS reads a Polygon smart contract for stage-2 payload

EtherHiding exfiltration traffic and ClickFix C2 domain detected by network IDS at CRITICAL severity

Obfuscated script concealing threat-feed blockchain RPC hosts (1rpc.io, polygon.drpc.org, tenderly.co gateways)

Primary domain flagged as malware loader in threat intelligence

Social-engineering overlay instructs Windows users to open Terminal and run commands — a malware-installation lure on an otherwise ordinary business site

Domain age information unavailable

Details

Page Title

Toldos Ortiz – Empresa dedicada a la confección e instalación de toldos y cortinas

Scan Type

public

Favicon Hash

MMH3: 210197485

MD5: cffb80ace11667d733277e3e1cf2c3ed

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'toldosortizrd.com' is registered and has no subdomain. The second-level label 'toldosortizrd' is 13 characters long holding four vowels versus 9 consonants. Segmentation suggests four words: told, os, ortiz, rd. Expect three characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

14.49s

Total Load Time

2.7 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:50%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:6,282 chars

Detector Agreement:100%

Language mismatch: Declared as en-US but detected as es

Website Classification

Primary Category

real estate property99% confidence

Type: spa

Method: ml+structural

All Detected Categories

real estate property

99%

news media journalism

99%

education learning

98%

healthcare medical

97%

corporate business

97%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
21	162.215.97.35	United States	AS46606Unified Layer
5	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
5	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
5	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
5	142.251.13.102Google · CDN	United States	AS15169Google LLC
5	142.251.157.119Google · CDN	United States	AS15169Google LLC
5	104.26.5.88Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	188.114.96.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
5	192.0.77.48	San Francisco, California, United States	AS2635Automattic, Inc
171	31	-	-