ScanMalware.com

Security Scan Report: 1flex.org

Redirected to:
https://www.youtube.com/watch?v=jy4qYmf3TxA
Site favicon
Submitted: May 15, 2026, 12:24:36 AMCompleted: May 15, 2026, 12:25:59 AMpubliccompleted
Loading additional data...

Summary

This website contacted 9 IPs in 2 countries across 12 domains to perform 82 HTTP transactions. The main domain is youtube.com and was registered NaN years ago.

Submitted URL: https://1flex.org

Effective URL: https://www.youtube.com/watch?v=jy4qYmf3TxARedirected

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

The site shows strong network‑level malware indicators despite lacking visible phishing forms, suggesting it is used for malicious activity.

Risk Factors
Unranked domain with brand name mention (YouTube) in title
Critical IDS alerts for malware and C2 activity
Multiple redirects to external YouTube video
Safety Factors
Domain age >20 years (well‑established)
No credential or payment forms
No malicious Indicators of Compromise detected
No JavaScript malware patterns
Domain age information unavailable

Details

Page Title

1Flex - Stream Movies, TV Shows, Live TV & Games

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

entertainment media

(38%)

Domain Information

The domain name '1flex.org' uses the non-profit oriented generic top-level domain (.org) while skipping any subdomain. The core label '1flex' covers 5 characters split between one vowel and three consonants; bonus characters include 1 digit. Tokenizing the label suggests 2 words: 1, flex. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://1flex.org

Page Load Overview

1.90s
Total Load Time
203
HTTP Requests
16
Domains
3.7 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:5,927 chars
Detector Agreement:100%

Website Classification

Primary Category

entertainment media38% confidence
Type: static
Method: ml+structural

All Detected Categories

entertainment media
38%
forum
35%
social_media
25%

Detected Features

Search
Comments

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
27104.18.41.22United States
AS13335Cloudflare, Inc.
22188.114.96.3United States
AS13335Cloudflare, Inc.
22139.45.197.115Germany
AS9002RETN Limited
22142.251.14.95United States
AS15169Google LLC
2274.125.108.234United States
AS15169Google LLC
22142.251.20.190United States
AS15169Google LLC
22142.251.13.119United States
AS15169Google LLC
22188.114.97.3United States
AS13335Cloudflare, Inc.
22173.194.6.7United States
AS15169Google LLC
2039--

Detected Technologies4

OpenSearch
100%
HTTP/3
40%
Cloudflare Bot Management
40%
Cloudflare
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T14EF284726902C81A55038EA81137BF2DA08AC97DD637BB95F7ECD79B06C18B1CFE4524

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:JMt1RFu0GYgU3H4rFVaSDXwDQYdOMoRp2Yk4hJvR1PV+wnJ91HTqoqqqqqqqqqQp:ljFVdcLWjTqEHb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:36758:qDINJ0GgSAASBKQAFFQ4Mii5BOMsSiFSRCyVABrqFvXFCQgkCArlkAkZDB8UTWEkABA+AgRkAFQkAm6LwJEIIohJCSApOARY

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffffffffffffff1f
Perceptual Hash:8ff00ff00ff00fe0
Difference Hash:0000000000000060
Wavelet Hash:f0f0f0f0f0f0f810
Color Hash:#89d279

Other Hashes

Crop Resistant:0000000000000060

Scan History

Scan history not available

Unable to load historical scan data