Security Scan: Mancomunidad Centro Sur

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/9e142dd8-07e7-4667-a311-c9ab78d47db1 Domain and IP registration (RDAP)/api/v1/rdap/9e142dd8-07e7-4667-a311-c9ab78d47db1How often this domain was scanned/api/v1/domain/stats/mancomunidadcentrosurftv.org Scan history for this domain/api/v1/domain/history/mancomunidadcentrosurftv.org?limit=15

This website contacted 19 IPs in 2 countries across 11 domains to perform 94 HTTP transactions. The main domain is mancomunidadcentrosurftv.org and was registered 10 years ago.

Submitted URL: https://mancomunidadcentrosurftv.org

AI Security Verdict

High Risk

Confidence: 82%

Risk Score

Legitimate 10-year-old municipal website that appears compromised: CRITICAL EtherHiding/malware IDS alert, blockchain C2 traffic and a malware-flagged third-party domain (xaz2.com) load from the page.

Risk Factors (5)

CRITICAL network IDS malware/EtherHiding exfiltration alert

C2-style blockchain RPC communication (gateway.tenderly.co)

External malware-flagged domain xaz2.com loaded on-page

Primary domain listed in threat-intel as malware (rat)

Likely site compromise injecting hidden malicious scripts

Domain age information unavailable

Details

Page Title

Mancomunidad Centro Sur

Scan Type

public

Favicon Hash

MMH3: 181991170

MD5: 5fda369786fb320b4de5b7fb898bd09b

Domain Name Analysis

Domain 'mancomunidadcentrosurftv.org' uses the non-profit oriented generic top-level domain (.org) and has no subdomain. The core label 'mancomunidadcentrosurftv' covers 24 characters with eight vowels and 16 consonants. Splitting it apart reveals six words: man, comuni, dad, centro, surf, tv. Expect 3.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

90.37s

Total Load Time

4.3 MB

Total Size

Language Analysis

Primary Language

🇪🇸Spanish

Code: es

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:es

Text Length:7,438 chars

Detector Agreement:80%

Website Classification

Primary Category

news media journalism40% confidence

Type: spa

Method: ml+structural+ocr_tiebreaker

All Detected Categories

news media journalism

40%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
22	142.251.13.95Google · CDN	United States	AS15169Google LLC
4	172.64.147.188Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
4	142.251.157.119Google · CDN	United States	AS15169Google LLC
4	142.251.110.97Google · CDN	United States	AS15169Google LLC
4	151.101.65.155Fastly · CDN	United States	AS54113Fastly, Inc.
4	89.248.96.76	Spain	AS48348Cloud Builders SA
4	151.101.193.155Fastly · CDN	United States	AS54113Fastly, Inc.
4	142.251.154.119Google · CDN	United States	AS15169Google LLC
4	142.250.154.95Google · CDN	United States	AS15169Google LLC
4	142.251.14.94Google · CDN	United States	AS15169Google LLC
94	19	-	-