Security Report: mb-consilium.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/7174d457-3f8d-42a0-9d42-3ab95ccc0e93 Domain and IP registration (RDAP)/api/v1/rdap/7174d457-3f8d-42a0-9d42-3ab95ccc0e93How often this domain was scanned/api/v1/domain/stats/mb-consilium.com Scan history for this domain/api/v1/domain/history/mb-consilium.com?limit=15

This website contacted 7 IPs in 3 countries across 7 domains to perform 82 HTTP transactions. The main domain is mb-consilium.com and was registered 5 months ago.

Submitted URL: https://mb-consilium.com

AI Security Verdict

High Risk

Confidence: 88%

Risk Score

Legitimate-looking French HR consultancy whose WordPress page carries an analyst-vetted ErrTraffic/Exvicy injected loader (CRITICAL YARA) with blockchain EtherHiding C2/exfil traffic — the site appears compromised; do not interact.

Risk Factors (5)

Known malicious kit (ErrTraffic/Exvicy injected WordPress loader) detected on the page

High-precision CRITICAL YARA hit for an obfuscated loader using new Function + XOR-decoded Base64 blob

Primary domain matched by threat intelligence as a malware loader

CRITICAL IDS alerts for EtherHiding exfiltration over blockchain RPC

Third-party exploit-kit domain (lovezramexar.info) loaded as a resource

Domain age information unavailable

Details

Page Title

Mehdi Bezzaoucha – Conseil RH & Organisation en Entreprise

Scan Type

public

Favicon Hash

MMH3: -186326619

MD5: 5709c0e5c6d9cd86e4222bc9194b3604

Domain Name Analysis

You're looking at domain 'mb-consilium.com' on the commercial generic top-level domain (.com) without a subdomain. Its registrable label 'mb-consilium' stretches across 12 characters containing 4 vowels alongside seven consonants, plus one hyphen. Word splitting yields 3 words: mb, cons, ilium. Median word length is four characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

75.08s

Total Load Time

10.5 MB

Total Size

Language Analysis

Primary Language

🇫🇷French

Code: fr

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:fr-FR

Text Length:3,306 chars

Detector Agreement:50%

Website Classification

Primary Category

adult content93% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content

93%

government public service

56%

entertainment media

42%

news media journalism

42%

technology software

39%

Detected Features

Articles

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
16	102.207.216.121	Algeria	AS329494AYRADE
11	142.251.13.95Google · CDN	United States	AS15169Google LLC
11	188.114.97.9Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	142.251.20.94Google · CDN	United States	AS15169Google LLC
11	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	172.66.146.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	158.94.208.87	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
82	7	-	-