Security Scan Report: mountainviewleongatha.com.au

Site favicon
Submitted: Completed: publiccompleted
This website contacted 17 IPs in 3 countries across 12 domains to perform 109 HTTP transactions. The main domain is mountainviewleongatha.com.au.

Submitted URL: https://mountainviewleongatha.com.au

AI Security Verdict

High Risk

Confidence: 88%

8
Risk Score

Genuine-looking retirement village page, but its own domain is flagged as a malware loader, scripts call blockchain RPC/EtherHiding C2 endpoints, and CRITICAL IDS malware alerts fire — treat as compromised/malware-hosting.

Risk Factors (5)
Content-malware threat-intel match on the scanned primary domain (loader)
CRITICAL IDS malware alerts for EtherHiding exfiltration (x2)
Blockchain RPC / smart-contract calls consistent with hidden C2 channel
Malicious third-party script host (checkyoubrowse.codes) loaded by the page
Domain registered 1 day ago (critical age) with no reputation ranking
Domain age information unavailable

Details

Page Title

Home - Mountain View Leongatha

Scan Type

public

Domain Name Analysis

The domain name 'mountainviewleongatha.com.au' uses the Australian country-code top-level domain (.com.au) with no subdomain. Its registrable label 'mountainviewleongatha' stretches across 21 characters with ten vowels and eleven consonants. Splitting it apart reveals 4 words: mountain, view, leong, atha. The median word length lands at 4.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mountainviewleongatha.com.au

Page Load Overview

11.83s
Total Load Time
2.9 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-AU
Text Length:2,817 chars
Detector Agreement:100%

Website Classification

Primary Category

real estate property43% confidence
Type: spa
Method: ml+structural

All Detected Categories

real estate property
43%
corporate
35%
news/blog
20%

Detected Features

Search
OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13110.232.143.147Brisbane, Queensland, Australia
AS45638SYNERGY WHOLESALE PTY LTD
6142.251.153.119Google · CDNUnited States
AS15169Google LLC
6142.251.20.97Google · CDNUnited States
AS15169Google LLC
6216.239.32.36Google · CDNUnited States
AS15169Google LLC
6142.251.127.154Google · CDNUnited States
AS15169Google LLC
6142.251.20.94Google · CDNUnited States
AS15169Google LLC
6188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.251.14.94Google · CDNUnited States
AS15169Google LLC
6114.31.200.168Sydney, New South Wales, Australia
AS4826Vocus Connect International Backbone
6172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
10917--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F2E36131BAB6093A111F328FA017130D11C7EB9BC7459BF9B2FF406897B4E913A93695

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:rtyp0smL2L/LKCrM37IVBeaVlQ41qT2qcbKRi/FGkRTjYoIB1MRi:rIu2rM37aY41qTrsKRi/FGiTHIB1ME

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:151494:KZsAiEXCqQJIVeQAgBTSUjJxRAgUAnChgQAzmpEEjwVY6mAAwbJMMAIIGMQNhGITQ4HWGEqMAVI+hRCJhBIFgIpIAAArpKQC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff7c0000343c30ff
Perceptual Hash:82f4fd83be20bd28
Difference Hash:e0c191cde9e1c1f1
Wavelet Hash:ff7c00003c3c38ff
Color Hash:#cae06c

Scan History

Scan history not available

Unable to load historical scan data