Security Scan Report: pandavirginia.com

Submitted: Completed: publiccompleted
This website contacted 11 IPs in 1 country across 1 domain to perform 18 HTTP transactions. The main domain is pandavirginia.com and was registered 7 years ago.

Submitted URL: https://pandavirginia.com

AI Security Verdict

High Risk

Confidence: 68%

7
Risk Score

Abandoned WordPress site whose primary domain is flagged single-source as the 'strelastealer' malware family and which loads JS from an unranked random-name host — likely compromised. No credential or payment forms on the page, but do not interact.

Risk Factors (4)
Single-source threat-intel match on the primary domain naming a stealer malware family
Unranked script host with a random-looking domain (morquintalverodexia.morquintalverodexia.shop) serving JavaScript
Abandoned/defacement-prone default WordPress content still hosting third-party scripts
Domain is not ranked in Cisco Umbrella top 1M despite being 7 years old (weak signal)
Domain age information unavailable

Details

Page Title

Panda Virginia – My WordPress Blog

Scan Type

public

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'pandavirginia.com' is registered with no subdomain. The second-level label 'pandavirginia' is 13 characters long with 6 vowels and 7 consonants. Splitting it apart reveals 2 words: panda, virginia. Median word length comes out to 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://pandavirginia.com

Page Load Overview

1.97s
Total Load Time
260 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:580 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content27% confidence
Type: dynamic
Method: ml+structural+ocr_tiebreaker

All Detected Categories

adult content
27%
blog personal website
27%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
8104.225.208.26Dallas, Texas, United States
AS46505NixiHost.com Incorporated
1172.66.44.168Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
169.175.50.229United States
AS32475Internap Holding LLC
113.33.52.208Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
118.165.9.16Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
118.64.46.156Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
144.198.231.133Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
144.215.139.172Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
144.215.115.167Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
113.33.49.50Cloudfront · CDNNew York, New York, United States
AS16509Amazon.com, Inc.
1811--

Detected Technologies12

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1B252067B488E7C37420B82D9B0943E0DA56B913EC603DEACF5F7633123E6ED1A415649

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:507agWwBMU1ciod0DFOKLFp8E7hDQLIMSVLLN8mjN:kPWcEO1Fp8E7D8mjN

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:13917:EIBBKBlohRPAcwTioUiPIGIRIXoEoEiBCoAAQMQAywUCAggIZRy8K8OwhQTIMpGAAIjJAAQ+HiQA09A20ApigMcIgCKRGmHk

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00003c100030ffff
Perceptual Hash:ce46f16139d35293
Difference Hash:d5e1e0e1a5e5a23b
Wavelet Hash:00303c3800f7ffff
Color Hash:#693a78

Scan History

Scan history not available

Unable to load historical scan data