ScanMalware.com

Security Scan Report: woyao.se

Site favicon
Submitted: Oct 4, 2026, 5:40:18 PMCompleted: Oct 4, 2026, 5:41:13 PMpubliccompleted

AI Security Verdict

Moderate Risk

Confidence: 55%

4
Risk Score

Aged domain (2013) serving a design-link directory with no forms, no malware and no Indicators of Compromise; only concern is VPN keyword-stuffed Open Graph tags unrelated to the visible content, suggesting SEO spam.

Risk Factors (3)
Meta/OG tags stuffed with VPN-related keywords unrelated to the page's actual link-directory content (likely SEO spam or injected metadata)
Third-party brand name ('Bluelayer') used in title and Open Graph tags on a domain that does not match it, with no forms or verification
Domain not present in Cisco Umbrella top 1M despite 13-year age
Safety Factors (5)
Domain is 4,937 days old (registered 2013-03-29), a well-established registration age
Zero forms, zero password fields, zero payment fields — no credential or payment capture on the captured DOM
No Indicators of Compromise, no YARA/JS malware patterns, no known malicious kit in the roster, no IDS alerts
External scripts come from a small set of ranked, common CDN/font/analytics hosts (staticfile.org, googleapis/gstatic, baidu.com)
Visible content is an ordinary design-resource directory with descriptive link text, consistent with a real (if low-reputation) site
Domain age information unavailable

Details

Page Title

Bluelayer

Scan Type

public

Domain Name Analysis

The domain name 'woyao.se' uses the Swedish country-code top-level domain (.se) and has no subdomain. The second-level label 'woyao' is 5 characters long with three vowels and 2 consonants. Segmentation suggests two words: wo, yao. Average segment length settles at 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://woyao.se

Page Load Overview

12.03s
Total Load Time
1.9 MB
Total Size

Language Analysis

Primary Language

🇨🇳Chinese
Code: zh
Confidence:60%
Script:Han
Direction:ltr

Detection Details

HTML Lang Attribute:zh
Text Length:12,046 chars
Detector Agreement:50%

Website Classification

Primary Category

forum50% confidence
Type: dynamic
Method: structural

All Detected Categories

forum
50%
news/blog
40%

Detected Features

Comments
OG: article

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
38167.179.91.152Minamishinagawa, Tokyo, Japan
AS20473The Constant Company, LLC
36202.181.25.28Hong Kong
AS55933Cloudie Limited
36142.251.20.95Google · CDNUnited States
AS15169Google LLC
36183.240.98.228China
AS56040China Mobile communications corporation
36142.251.14.95Google · CDNUnited States
AS15169Google LLC
36192.178.183.94Google · CDNUnited States
AS15169Google LLC
3614.215.182.140China
AS4134Chinanet
2547--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1F444C8F5A0F0442B4093E6809A752B2EBF91F20BD6971184BAFC6BF15F96D63D92311C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:9xIPeHTl76xQ56hclG8ltuwqqeShR/vKrRnF:sezl7X5zlG8TuwqYhR/vKrn

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:277402:aFNGILRH0IMTuAgGYCBTUCOQziE0uwJCYCCoRCRCIBYomAINQg8UEgE5oRJCyIkoochqJE4SgNGozEBozKCCB7AQKMBApofG

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:3f3f3f3f3f3f3f3f
Perceptual Hash:81f5ddd0e6c5ac81
Difference Hash:d4d8d6d5d5d5d0d5
Wavelet Hash:3e2f232d253d2f05
Color Hash:#2d2fd2

Other Hashes

Crop Resistant:a4b0a4ada9a9a5ad,c8a4e2e0a2000000

Scan History

Scan history not available

Unable to load historical scan data