Security Report: cdn.pandawow.ru - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/470675d4-908f-4465-874d-33e82d1a3985 Domain and IP registration (RDAP)/api/v1/rdap/470675d4-908f-4465-874d-33e82d1a3985How often this domain was scanned/api/v1/domain/stats/cdn.pandawow.ru Scan history for this domain/api/v1/domain/history/cdn.pandawow.ru?limit=15

This website contacted 4 IPs in 3 countries across 1 domain to perform 1 HTTP transaction. The main domain is pandawow.ru.

Submitted URL: https://cdn.pandawow.ru

AI Security Verdict

Moderate Risk

Confidence: 68%

Risk Score

Single-source threat intel flags this domain for a malware/C2 family, which drives the verdict to HIGH_RISK; the page itself shows a benign calculator with no password or payment fields. Corroboration before trusting.

Risk Factors (3)

Single-source (uncorroborated) threat-intel report naming a malware/C2 family on the scanned domain

Domain not present in Cisco Umbrella top 1M — no established reputation

Scanner received a bot-protection/challenge page while a residential client received real content (common on legitimate sites, but reduces verifiability)

Safety Factors (6)

Verified form facts show zero password, disguised-password and payment fields — no credential or payment collection

Account creation appears to use OAuth ('Continue with Google', 'Continue with Microsoft 365') rather than password submission

No cross-origin credential forms or credential exfiltration detected

No high-precision hunting rule, no native-hunting-rule hits, no Suricata IDS alerts, no known phishing kit in roster

Page reads as a coherent free tool with privacy/sourcing notices, not an urgent scare page

No concrete malicious signal (no IoC / hunting rule / Safe-Browsing / IDS / credential form / brand impersonation) — elevated risk rested on domain age or reputation alone; clamped from 7 to 5

Domain age information unavailable

Details

Page Title

Import Cost Desk — Landed Cost & Duty Calculator for Import/Export Companiesother network

Scan Type

public

Domain Name Analysis

Within the Russian country-code top-level domain (.ru), 'cdn.pandawow.ru' is registered with subdomain 'cdn'. Its registrable label 'pandawow' stretches across 8 characters holding 3 vowels versus 5 consonants. Breaking it apart gives two words: panda, wow. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Free tools Ri ‘checked against CBP and trade-press sources Es! Import Cost Desk nates are Informational only — not customs advice, How It Works Guides FAQ About | Gefnittefaisfcn FOR US IMPORTIEX...

Page Load Overview

75.06s

Total Load Time

N/A

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en

Text Length:7 chars

Detector Agreement:0%

Website Classification

Primary Category

unknown0% confidence

Type: static

Method: structural

All Detected Categories

No categories detected

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
1	176.120.74.59	Moldova	AS396982Google LLC
0	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
0	34.143.77.2Google · CDN	United States	AS396982Google LLC
0	157.240.0.35Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
1	4	-	-

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T191E2C325A0F4257711B342C2668A6F2B3FD6D10BDB1A220036FC9BF55F93D86CD1B899

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:LrzUkufWtBVQjfD3c+zJnlItq6wAF6wmiNJNII3cAEHSPvK2tUOypzetCW1Cnv:VtjQjfDjnS2i9IIMA6ot9yOCW1+v

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:31780:KAKEhAQBqEggAWYwRGDtgkI5pgKJUCEYwAyxZayVKgaAAQQQQK5AYPYfAgBKgBkkAiFIIVEAhRFAiCNAAFKVUQLAMIgY2gXE

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00df83dbfbdfffff

Perceptual Hash:b969474b49491e3e

Difference Hash:23163e32321c1a15

Wavelet Hash:00838383cb8fcfdf

Color Hash:N/A

Other Hashes

Crop Resistant:23163e32321c1a15,0121076979610721

Scan History

Scan history not available

Unable to load historical scan data

Security Scan Report: cdn.pandawow.ru