ScanMalware.com

Security Scan Report: extra-steps.org

Site favicon
Submitted: May 6, 2026, 2:59:28 AMCompleted: May 6, 2026, 3:01:05 AMpubliccompleted
Loading additional data...

Summary

This website contacted 4 IPs in 3 countries across 10 domains to perform 55 HTTP transactions. The main domain is extra-steps.org and was registered NaN years ago.

Submitted URL: https://extra-steps.org/

AI Security Verdict

High Risk

Confidence: 80%

8
Risk Score

The site shows no credential collection but a critical IDS C2 beacon and Safe Browsing warning indicate malware distribution; treat as high‑risk and avoid.

Risk Factors
Critical IDS alert indicating possible command‑and‑control communication
Google Safe Browsing Unwanted Software warning
Unranked domain reputation (not in Cisco Umbrella top 1 M)
Presence of many external, potentially malicious domains in page resources
UI element "Log in" without a functional form, suggesting deceptive intent
Domain age information unavailable

Details

Page Title

Professional Child Therapy Services | Extra Steps

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

social media network

(89%)

Domain Information

The domain name 'extra-steps.org' uses the non-profit oriented generic top-level domain (.org) with no subdomain. Count 11 characters in 'extra-steps' containing 3 vowels alongside 7 consonants, plus 1 hyphen. Word splitting yields 2 words: extra, steps. Median word length is five characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://extra-steps.org/

Page Load Overview

7.47s
Total Load Time
60
HTTP Requests
5
Domains
799 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:532 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network89% confidence
Type: spa
Method: ml+structural

All Detected Categories

social media network
89%
documentation technical
35%
corporate
35%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
15103.224.212.215Australia
AS133618Trellian Pty. Limited
1554.210.251.163Ashburn, Virginia, United States
AS14618Amazon.com, Inc.
15178.16.53.137Amsterdam, North Holland, Netherlands
AS202412Omegatech LTD
15142.251.13.97United States
AS15169Google LLC
604--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T105530873E19D4826378B07CCC4B5B308D07E9525C6818AEEBEF9616CE2D4BF91197A4C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:9pTyppdJwgBkuAckHkcGBuIAAXmi9+gupdBLZ1JHUIMtVeN/sqR/4TAdOgSdyj:9p+/d+gBkDckHkxBRWIIMtIJsqR/4TAT

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:65318:o3oAUqIEkAkAKAAUKAojIGYmRIBwCoAIBQAk4CwIyQABKQoiYAxgJElIP4Di5BEyDQXRAEnRAkC1hqUGHYqTAUAIDlQEBiDC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ff00000000000000
Perceptual Hash:aad580808095ffff
Difference Hash:9200010101010101
Wavelet Hash:ff8b810101010101
Color Hash:#2d5c86

Other Hashes

Crop Resistant:b6b6b6b6767676d6,8100010101010101

Scan History

Scan history not available

Unable to load historical scan data