ScanMalware.com

Security Scan Report: firstpandr.org

Submitted: Sep 23, 2026, 1:17:49 PMCompleted: Sep 23, 2026, 1:18:26 PMpubliccompleted

AI Security Verdict

High Risk

Confidence: 82%

8
Risk Score

Low-reputation WordPress site showing a CRITICAL AMOS ClickFix malware loader alert, repeated suspicious .life requests, and a single-source 'iclickfix' malware indicator on the primary domain. No credential form, but clear malware-distribution signals.

Risk Factors (4)
CRITICAL IDS alert for AMOS ClickFix malware loader campaign
Malware IoC match on primary domain (iclickfix)
Repeated requests to a suspicious .life external domain tied to the loader pattern
Unranked domain with no legitimate reputation and generic filler content
Domain age information unavailable

Details

Page Title

Branding Marketing Agency – Strategy | Story | Trust

Scan Type

public

Domain Name Analysis

Domain 'firstpandr.org' uses the non-profit oriented generic top-level domain (.org). Its registrable label 'firstpandr' stretches across 10 characters split between two vowels and 8 consonants. It segments into 3 words: first, p, andr. Expect four characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://firstpandr.org

Page Load Overview

4.69s
Total Load Time
205 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:719 chars
Detector Agreement:100%

Website Classification

Primary Category

social media network83% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

social media network
83%
news media journalism
65%
finance banking
30%

Detected Features

Articles

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
5116.202.233.39Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
2142.251.20.95Google · CDNUnited States
AS15169Google LLC
2138.124.60.214Switzerland
AS203273NetCrafters OU
2104.26.10.205Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.250.154.95Google · CDNUnited States
AS15169Google LLC
2172.67.68.221Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
2142.251.110.94Google · CDNUnited States
AS15169Google LLC
177--

Detected Technologies8

WordPressv7.1.2
100%
MetaGenerator
100%
PHP
50%
MySQL
50%
LiteSpeed
40%
HTTP/3
40%
WordPress Block Editor
30%
HubSpot CMS
15%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T19843B671919841BA7E4FC7FCC120B32CA48DEA75C90397A572FA7268C2D49F7606E11E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:KQZdypZT37ahfT6au6cmREoQRML6cmREoQRISvrxL1pq:KYypN7Cr6l6VREoQRc6VREoQRISDxJpq

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:57120:VEhwHEMaBAAEWVCAkB6gAQACDUpRbAlhDRqmBkQBTS2UUQ+AAAIXYqRlEYoSzbyAAhaAoNYnASGA0SiGJCgACBNgBCUdQUEA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:bffffffc08020000
Perceptual Hash:df9ca54a4aa5b44a
Difference Hash:6942362939464a6a
Wavelet Hash:bffefefe0c008080
Color Hash:#3f3a78

Other Hashes

Crop Resistant:6942362939464a6a

Scan History

Scan history not available

Unable to load historical scan data