Security Scan Report: pandagroup.it

Site favicon
Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 54 HTTP transactions. The main domain is pandagroup.it and was registered 2 years 9 months ago.

Submitted URL: https://pandagroup.it/wp-admin/images/ser/amndes/

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

Compromised WordPress path on pandagroup.it serving a Boots-branded page with a 'you have been selected' gift survey lure. Brand impersonation plus a reward-scam funnel; no credential fields found, but do not interact.

Risk Factors (5)
Impersonation of Boots (UK pharmacy/retail brand) on a domain that is not boots.com and has no relationship to the brand
Content served from a /wp-admin/ path indicating a compromised WordPress site used to host injected pages
'You have been selected... special gift' survey/reward bait designed to pull visitors into a survey funnel
Domain not present in Cisco Umbrella top 1M and carries no reputation supporting a Boots-branded storefront
Replica of a retail storefront (basket, departments, Black Friday deals) used as credibility padding around the survey lure
Domain age information unavailable

Details

Page Title

Beauty | Health | Pharmacy and Prescriptions - Boots

Scan Type

public

Domain Name Analysis

Domain 'pandagroup.it' uses the Italian country-code top-level domain (.it) without a subdomain. The registrable portion 'pandagroup' spans 10 characters split between four vowels and 6 consonants. Segmentation suggests two words: panda, group. Average segment length settles at five characters. No strong language cues emerged from the frequency lists.

Screenshot

Ship to BE | @ Findastore | @ Help Log iniregister | Boots Advantage Card Search products, brands and services. Q nity Shop by department Prescriptions Heal LB Welcome You have been selected to p...

Page Load Overview

2.90s
Total Load Time
1.1 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:175,434 chars
Detector Agreement:100%

Website Classification

Primary Category

healthcare medical74% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

healthcare medical
74%
e-commerce shopping
54%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
545.134.122.150Italy
AS3242Reevo S.p.A.
541--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T13A456265A76D1C77826312CA62A837A8B19F8E34D11E0DC5F97FDF38A3C1C91759C02A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:jZD7ni4wkIy+1kwZPxOi3mvCzK3oCl+eHu84G3HsC+Yq9oLR/MtZ8XiYJPutHIji:7HN+Eu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:1205854:ABcCARQgTz2FkINRCYAAFVhiJHBYxgJQREA5ZinEAiCoghOhCZIicQxsKTCiIIREhAoU0g4iqCUOBAJAQB4oCiSHoUIAASqg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffbd9d8181818183
Perceptual Hash:beca95316425926f
Difference Hash:70792927273f6f2f
Wavelet Hash:ffbdbd8181818187
Color Hash:16c00000000

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data