ScanMalware.com

Security Scan Report: phonicscompany.com

Site favicon
Submitted: Oct 9, 2026, 3:31:07 AMCompleted: Oct 9, 2026, 3:31:57 AMpubliccompleted

AI Security Verdict

High Risk

Confidence: 72%

8
Risk Score

Established phonics-education site showing CRITICAL exploit-kit/CnC IDS alerts (TA2726/TA569 Gholoader) and out-of-place blockchain RPC traffic, indicating likely compromised/injected scripts. Avoid interaction until cleaned.

Risk Factors (5)
CRITICAL IDS exploit-kit and command-and-control alerts (TA2726 fake WordPress plugin, TA569 Gholoader)
External command-and-control domain cdn14.quran.edu.eu.org contacted via DNS and TLS SNI
Blockchain RPC connections (BNB/BSC testnet nodes) unrelated to a children's education site
eval() calls in page scripts
Domain is not ranked in the Cisco Umbrella top 1M despite being 7 years old
Domain age information unavailable

Details

Page Title

Phonics Company – Learn and play

Scan Type

public

Domain Name Analysis

You're looking at domain 'phonicscompany.com' on the commercial generic top-level domain (.com) and has no subdomain. Its registrable label 'phonicscompany' stretches across 14 characters containing 4 vowels alongside ten consonants. It segments into two words: phonics, company. Average segment length settles at seven characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://phonicscompany.com

Page Load Overview

6.62s
Total Load Time
2.6 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:2,655 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning62% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
62%

Detected Features

Products

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2292.205.172.228Germany
AS21499Host Europe GmbH
7142.250.154.95Google · CDNUnited States
AS15169Google LLC
723.207.210.143Akamai · CDNFrankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
715.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
73.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
735.71.129.99Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
7104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
73.33.155.121Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
7142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
7172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
13417--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A684AF20BA784DAA634766CB902177AD759BAF79DA4384D271FF52141BF0DD4220333E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:ntmZoYCxDbg3OzU6k8vs8mYViwQFuvMZPYdmOWi4c8EUI5+c+:nbQ4Fk808mYU1gMZPi4fx

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:388820:AQEUQCIiTEEhi1WAXANG57Qi5ArSSJmMCCDgZMigFCwhaAAlk5U2ZIYcAgGpBOQAEDciiwBiSAJQKIBkRpgP4larCfEGiM5p

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00000000ffdfdfff
Perceptual Hash:fc43b8b8c33cb682
Difference Hash:02c04122c43b372f
Wavelet Hash:c0000000ffdfdfff
Color Hash:#c587b7

Other Hashes

Crop Resistant:02c04122c43b372f,3919193333276858,6367c54416b27361,8f19313033f06461

Scan History

Scan history not available

Unable to load historical scan data