Security Scan Report: cdn.pandawow.ru

Submitted: Completed: publiccompleted
This website contacted 7 IPs in 4 countries across 4 domains to perform 8 HTTP transactions. The main domain is pandawow.ru.

Submitted URL: https://cdn.pandawow.ru

AI Security Verdict

High Risk

Confidence: 65%

7
Risk Score

Landed-cost calculator on cdn.pandawow.ru, a gaming private-server subdomain whose primary domain is flagged in threat-intel as 'nightshadec2' C2 malware. No credential/payment form detected, but hosting mismatch plus malware reputation warrants avoidance.

Risk Factors (4)
Primary domain flagged for command-and-control malware (nightshadec2) in threat-intel feeds
Legitimate-looking financial tool hosted on an unrelated gaming/CDN subdomain — likely compromise or domain repurposing
Account-creation email capture used as a funnel off the claimed brand's real property
Domain unranked, no verifiable reputation
Domain age information unavailable

Details

Page Title

Import Cost Desk — Landed Cost & Duty Calculator for Import/Export Companies

Scan Type

public

Domain Name Analysis

The domain name 'cdn.pandawow.ru' uses the Russian country-code top-level domain (.ru), featuring subdomain 'cdn'. The second-level label 'pandawow' is 8 characters long split between three vowels and 5 consonants. Splitting it apart reveals 2 words: panda, wow. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

Screenshot

Free tools Ri ‘checked against CBP and trade-press sources Es! Import Cost Desk nates are Informational only — not customs advice, How It Works Guides FAQ About | Gefnittefaisfcn FOR US IMPORTIEX...

Page Load Overview

80.10s
Total Load Time
262 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:9,978 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical43% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

documentation technical
43%
finance banking
41%
government public service
39%
e-commerce shopping
27%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2176.120.74.59Moldova
AS212171Local NCC Ltd.
1157.240.0.6Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
134.143.72.2Google · CDNUnited States
AS396982Google LLC
1157.240.0.35Facebook · CDNFrankfurt am Main, Hesse, Germany
AS32934Facebook, Inc.
177.91.100.113Amsterdam, North Holland, Netherlands
AS212171Local NCC Ltd.
1185.248.144.134MoldovaUnknown
134.143.76.2Google · CDNUnited States
AS396982Google LLC
87--

Detected Technologies2

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AAE2B325A0F4257711B342C2668A6F2B3FD6D10BDB1A220036EC9BF55FD3D86CD1B899

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:nrzUkuMYuHBVQjhD3c+zJnlItq6wAF6wmiNJNII3cAEHSPvK2tUOypzetCW1Cnv:fHjQjhDjnS2i9IIMA6ot9yOCW1+v

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31735:IZGyhwAIG1sAIoJQLEHBKAcbiMCGAIgjQC/qigRHguxpVTgaDTEILgmEGZAvAm4oFnACIaQHC0AgJ0RBADaCEkMEpMCGwlEP

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:0f0f3f3f7f3f3707
Perceptual Hash:811d37dcf08e8ee4
Difference Hash:f87af0f0c0e0eecc
Wavelet Hash:1e021e3f7f1f0307
Color Hash:N/A

Other Hashes

Crop Resistant:f87af0f0c0e0eecc

Scan History

Scan history not available

Unable to load historical scan data