Security Scan Report: today.so

Redirected to:
https://www.wherewindsmeetgame.com/ldysteam2/?channel=pwngamesads&utm_...
Site favicon
Submitted: Aug 25, 2026, 7:07:19 PMCompleted: Aug 25, 2026, 7:08:57 PMpubliccompleted

This website contacted 2 IPs in 1 country across 12 domains to perform 4 HTTP transactions. The main domain is wherewindsmeetgame.com and was registered 22 years ago.

Submitted URL: http://today.so/

Effective URL:

https://www.wherewindsmeetgame.com/ldysteam2/?channel=pwngamesads&utm_...
Redirected

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

Site shows brand mismatch and low reputation but lacks credential collection or malware; treat as moderate risk.

Risk Factors (4)
Unranked/low‑reputation domain
Brand mismatch (official‑sounding site on unrelated domain)
High‑severity IDS alert (referrer‑policy)
Lack of reputable ranking despite 991‑day age
Safety Factors (4)
Domain age > 2 years
Physical address and business entity listed
No forms collecting credentials or payments
No malicious IoC or YARA detections
Domain age information unavailable

Details

Page Title

Where Winds Meet | Official Website

Scan Type

public

Domain Name Analysis

The domain 'today.so' uses the .so country-code top-level domain. The core label 'today' covers 5 characters containing 2 vowels alongside 3 consonants. Tokenizing the label suggests 1 word: today. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://today.so/

Page Load Overview

0.52s
Total Load Time
3 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:61%
Script:Latin
Direction:ltr

Detection Details

Text Length:6,745 chars
Detector Agreement:100%

Website Classification

Primary Category

travel tourism48% confidence
Type: spa
Method: ml+structural

All Detected Categories

travel tourism
48%
adult content
34%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2172.234.24.173Chicago, Illinois, United States
AS63949Akamai Connected Cloud
2172.234.216.100Chicago, Illinois, United States
AS63949Akamai Connected Cloud
42--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FAA1F8757785B029AAE610E7B5BBA35C363E4250380B4032E7AEFCD13C60D5B9497F86

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:nIzJBd5pAJ9/OEeg2J9LCBCfq/0CqR4oDt/b3hRFgDbjfq97BoL:IzJBd5pAKEj8qCfY0hBBgnjfAyL

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:4793:sIAgIBLkgQSCIIhDcAkQAIA0PhAhwEGQDCAAAAEBDAASRWgkA4FBCAoRYYICMSgqBCDAYgcIIwAhQQYhgCMIBFEQhUAQAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:003c3c3c3c3c1000
Perceptual Hash:caf3252e316ccb19
Difference Hash:8de869696961e109
Wavelet Hash:40fefcfc7c3c3800
Color Hash:#53aca0

Scan History

Scan history not available

Unable to load historical scan data