Security Scan Report: mancomunidadcentrosurftv.org

Site favicon
Submitted: Sep 14, 2026, 7:47:32 AMCompleted: Sep 14, 2026, 7:49:48 AMpubliccompleted

Summary

This website contacted 19 IPs in 2 countries across 11 domains to perform 2 HTTP transactions. The main domain is mancomunidadcentrosurftv.org and was registered 6 years ago.

Submitted URL: https://mancomunidadcentrosurftv.org

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Legitimate 10-year-old municipal website that appears compromised: CRITICAL EtherHiding/malware IDS alert, blockchain C2 traffic and a malware-flagged third-party domain (xaz2.com) load from the page.

Risk Factors
CRITICAL network IDS malware/EtherHiding exfiltration alert
C2-style blockchain RPC communication (gateway.tenderly.co)
External malware-flagged domain xaz2.com loaded on-page
Primary domain listed in threat-intel as malware (rat)
Likely site compromise injecting hidden malicious scripts
Domain age information unavailable

Details

Page Title

Mancomunidad Centro Sur

Scan Type

public

Language

🇪🇸

Spanish

(80% confidence)

Category

news media journalism

(40%)

Domain Information

Domain 'mancomunidadcentrosurftv.org' uses the non-profit oriented generic top-level domain (.org) and has no subdomain. The core label 'mancomunidadcentrosurftv' covers 24 characters with eight vowels and 16 consonants. Splitting it apart reveals six words: man, comuni, dad, centro, surf, tv. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://mancomunidadcentrosurftv.org

Page Load Overview

90.37s
Total Load Time
94
HTTP Requests
11
Domains
3.8 MB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:es
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:es
Text Length:7,438 chars
Detector Agreement:80%

Website Classification

Primary Category

news media journalism40% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism
40%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
22142.251.13.95Google · CDNUnited States
AS15169Google LLC
4172.64.147.188Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4142.251.157.119Google · CDNUnited States
AS15169Google LLC
4142.251.110.97Google · CDNUnited States
AS15169Google LLC
4151.101.65.155Fastly · CDNUnited States
AS54113Fastly, Inc.
489.248.96.76Spain
AS48348Cloud Builders SA
4151.101.193.155Fastly · CDNUnited States
AS54113Fastly, Inc.
4142.251.154.119Google · CDNUnited States
AS15169Google LLC
4142.250.154.95Google · CDNUnited States
AS15169Google LLC
4142.251.14.94Google · CDNUnited States
AS15169Google LLC
9419--

Page Statistics

94
Requests
11
Unique Domains
4.3 MB
Total Size

Detected Technologies10

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T116A3D922E3516468363BC52AE2F3B9B8B9747214D3468675F87C603F89C53DB1AE3709

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:P9i5Q62I/xE6x4g5bn/dyF4DZdypa9uGzuYDxKZ+Ow9JKwqcZzuZM8jf8v+oHDlh:1iCAw6ypyZzuC8a2txk

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:97939:OIBOoIiADoIhS1ggmCAiIR4aICAAAGukSNUKJkiMAo7EwFEuGEQOQBFMVjL0Q0LlVBDDQACpmTAUvEMRIQ8GUZayIDAAhMAI

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fffe70207003037b
Perceptual Hash:a5daa534d924ec4b
Difference Hash:e8e1c1c0d166c6d2
Wavelet Hash:fffcf030400303fb
Color Hash:#c587c0

Scan History

Scan history not available

Unable to load historical scan data