ScanMalware.com

Security Scan Report: democracyforward.org

Submitted: Nov 14, 2025, 2:38:16 AMCompleted: Nov 14, 2025, 2:39:37 AMpubliccompleted
Loading additional data...

Summary

This website contacted 108 IPs in 0 countries across 25 domains to perform 104 HTTP transactions. The main domain is democracyforward.org and was registered NaN years ago.

Submitted URL: https://democracyforward.org/updates/statements-cities-workers-civil-society-organizations-sue-trump-vance-administration-for-weaponizing-public-service-loan-forgiveness-to-silence-critics-and-stifle-dissent/

AI Security Verdict

Moderate Risk

Confidence: 70%

5
Risk Score

Site appears legitimate but contains a hidden password field, indicating potential phishing risk.

Risk Factors
Hidden password field that could be used for credential harvesting
Password input on a non‑login form
Safety Factors
Domain is well‑established (over 8 years old)
No known malicious Indicators of Compromise
No payment or credit‑card fields present
Domain age information unavailable

Details

Primary Scan Blocked — Fallback Capture Shown

The primary scanner could not load this page (possible bot protection). The screenshot and page details shown were captured by a fallback browser that loaded the page successfully.

Page Title

Attention Required! | Cloudflare

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(38%)

Domain Information

You're looking at domain 'democracyforward.org' on the non-profit oriented generic top-level domain (.org) and has no subdomain. The second-level label 'democracyforward' is 16 characters long split between five vowels and eleven consonants. It segments into two words: democracy, forward. Median word length comes out to eight characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://democracyforward.org/updates/statements-cities-workers-civil-society-organizations-sue-trump-vance-administration-for-weaponizing-public-service-loan-forgiveness-to-silence-critics-and-stifle-dissent/

Page Load Overview

16.06s
Total Load Time
104
HTTP Requests
25
Domains
2.4 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:13,058 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service38% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
38%
news/blog
35%

Detected Features

Search
Articles
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
104142.250.181.227UnknownUnknown
0216.58.212.131UnknownUnknown
052.202.5.182UnknownUnknown
018.204.164.84UnknownUnknown
0172.64.147.188UnknownUnknown
0142.250.185.195UnknownUnknown
0104.18.2.171UnknownUnknown
0142.250.186.68UnknownUnknown
0216.58.212.136UnknownUnknown
0172.66.161.175UnknownUnknown
104108--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T142917726BAFD207E107381A266ED634979B0C413C7A605A0726CC2791F5FF56FD17284

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:lTkDa/D+DMF+C88ZqXKHvpIkdNGnRivPaQxJb0:lsa/So+nBaHvFdNGn4vieJ0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4234:AARgAIoSIkEAkYIgJAggMCkQAEEAIACAYIAIgJCiIQCI9IAAAqUAEAGIBBAYAACIMAAGAAEQEIAIyAAIBkSAACRESUgAQGBS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data