Security Scan Report: comercializadoranino.com

Submitted: Completed: publiccompleted
This website contacted 11 IPs in 1 country across 6 domains to perform 62 HTTP transactions. The main domain is comercializadoranino.com and was registered 10 years ago.

Submitted URL: https://comercializadoranino.com/gbh/five/PvqDq929BSx_A_D_M1n_a.php

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Established Mexican metals company whose WordPress site appears compromised: its primary domain is flagged as lokibot malware by two feeds and the scanned random-named PHP path is reported as malware. Avoid submitting data; site owner should be notified.

Risk Factors (4)
Threat intelligence matches the primary domain as 'lokibot' malware across two independent feeds
The exact scanned URL is flagged as malware
Randomized PHP path under an unusual directory on a corporate WordPress site indicates a likely webshell/backdoor upload
Legitimate-looking brochure site is serving (or previously served) attacker-controlled PHP content
Domain age information unavailable

Details

Page Title

No se encontró la página – Comercializadora Niño

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'comercializadoranino.com' is registered with no subdomain. Count 20 characters in 'comercializadoranino' split between 10 vowels and ten consonants. Segmentation suggests five words: co, mercia, liza, dora, nino. The median word length lands at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

£ (81) 8134 9614 y (81) 2230 COMERCIALIZADORA NIÑO Aceros Especiales Metales y Plásticos de Ingeniería Inicio Empresa Productos Servicios Contacto 404 Not Found Looks like you have taken a wrong...

Page Load Overview

2.95s
Total Load Time
573 KB
Total Size

Language Analysis

Primary Language

🇪🇸Spanish
Code: es
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:es-MX
Text Length:317 chars
Detector Agreement:100%

All Detected Languages

🇪🇸es(43%)🇺🇸en(42%)🇼🇦cy(15%)

Website Classification

Primary Category

corporate business40% confidence
Type: spa
Method: ml+structural+ocr_tiebreaker

All Detected Categories

corporate business
40%
documentation technical
32%
adult content
26%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5574.208.90.100United States
AS8560IONOS SE
5142.251.14.95Google · CDNUnited States
AS15169Google LLC
5142.251.20.113Google · CDNUnited States
AS15169Google LLC
5172.217.119.4Google · CDNUnited States
AS15169Google LLC
5142.251.13.94Google · CDNUnited States
AS15169Google LLC
5142.251.110.95Google · CDNUnited States
AS15169Google LLC
5192.178.183.139Google · CDNUnited States
AS15169Google LLC
5172.217.117.4Google · CDNUnited States
AS15169Google LLC
5142.251.14.94Google · CDNUnited States
AS15169Google LLC
5192.178.183.113Google · CDNUnited States
AS15169Google LLC
6211--

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1599231778C4D851746D221D0F4A4E24CEAAAA666E241CDD8BEFD406C67C8FD4C0B2F9C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:0ohKChAyzeXfnKGxQbVahrUUpuYf6jIBnMKxQ34m5us97zolb+5OTAMgV9:jrhAeafnKGxQbVahrUUpu3jIWKhm5us1

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:20809:+CQDBSoiAAXFhUFAwSQN1EMFBBjgAGKlWNsAQhJiIBh3KikJkEBIKvRADEJLCAWioDApAKmgKJGJCgpUhQAIihmBAgJDDqgO

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:009f7ffffffffffe
Perceptual Hash:bc3c3c387d634343
Difference Hash:3232c80000000102
Wavelet Hash:009f00c0f3f3f3f2
Color Hash:07000400018

Other Hashes

Crop Resistant:3232c80000000102

Scan History

Scan history not available

Unable to load historical scan data