ScanMalware.com

Security Scan Report: 1flex.org

Redirected to:
https://www.youtube.com/watch?v=jy4qYmf3TxA
Site favicon
Submitted: May 13, 2026, 11:02:19 PMCompleted: May 13, 2026, 11:03:48 PMpubliccompleted
Loading additional data...

Summary

This website contacted 13 IPs in 2 countries across 17 domains to perform 121 HTTP transactions. The main domain is youtube.com and was registered NaN years ago.

Submitted URL: https://1flex.org

Effective URL: https://www.youtube.com/watch?v=jy4qYmf3TxARedirected

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

The site shows strong network‑level malware indicators despite lacking visible phishing forms, suggesting it is used for malicious activity.

Risk Factors
Unranked domain with brand name mention (YouTube) in title
Critical IDS alerts for malware and C2 activity
Multiple redirects to external YouTube video
Safety Factors
Domain age >20 years (well‑established)
No credential or payment forms
No malicious Indicators of Compromise detected
No JavaScript malware patterns
Domain age information unavailable

Details

Page Title

- YouTube

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

entertainment media

(44%)

Domain Information

Within the non-profit oriented generic top-level domain (.org), '1flex.org' is registered without a subdomain. Its registrable label '1flex' stretches across 5 characters split between 1 vowel and 3 consonants, notching 1 digit. It segments into two words: 1, flex. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://1flex.org

Page Load Overview

2.41s
Total Load Time
228
HTTP Requests
18
Domains
3.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:6,032 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media44% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
44%
adult content
40%
education learning
39%
technology software
35%
forum
35%

Detected Features

Search
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
24173.194.24.137United States
AS15169Google LLC
17142.251.127.84United States
AS15169Google LLC
17142.251.20.119United States
AS15169Google LLC
17142.251.151.119United States
AS15169Google LLC
17104.18.41.22United States
AS13335Cloudflare, Inc.
17139.45.197.115Germany
AS9002RETN Limited
17142.251.14.132United States
AS15169Google LLC
17188.114.96.3United States
AS13335Cloudflare, Inc.
17142.251.110.94United States
AS15169Google LLC
17142.250.154.95United States
AS15169Google LLC
22813--

Detected Technologies4

OpenSearch
100%
HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1AF55F6611428A8B64883E243DCF5FF7FA9F413294BC8C5ADBDB2D79C02DDA580C9E855

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:pIgltAglt9gltwgltvglt2gltOgltogltdgltjgltzgltmgltgt4zRpKtqLqtyYZ:p9+WZ

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1350462:yAQhhMgEkBFMDMIslCIwhDhRZICrrGEWEgMCpcAAgCkAAg4AkMQ28FjhU2IFwXmwCm0oiIkigtAIQAiScTADjBiAkajFZAlk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:191919191919197f
Perceptual Hash:8b19f42ef024f1f4
Difference Hash:736b7b7b6b6b6bf1
Wavelet Hash:3f191919191919ff
Color Hash:#931f69

Other Hashes

Crop Resistant:736b7b7b6b6b6bf1,313539393d393535

Scan History

Scan history not available

Unable to load historical scan data