Security Report: 1022studio.com - Analysis

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/59b4e23f-ea0f-4263-a1fd-9a74fef9e528 Domain and IP registration (RDAP)/api/v1/rdap/59b4e23f-ea0f-4263-a1fd-9a74fef9e528How often this domain was scanned/api/v1/domain/stats/1022studio.com Scan history for this domain/api/v1/domain/history/1022studio.com?limit=15

This website contacted 20 IPs in 2 countries across 14 domains to perform 151 HTTP transactions. The main domain is 1022studio.com and was registered 1 year 11 months ago.

Submitted URL: https://1022studio.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate Toronto photography site compromised with an injected ClickFix/EtherHiding kit: a fake Cloudflare 'Human Verification' overlay pushes Windows users to paste a blockchain-fetched payload into Terminal. Do not interact; treat as malware.

Risk Factors (5)

Analyst-vetted ClickFix kit injected into the page, disguised as a Cloudflare browser-verification interstitial

EtherHiding: malware next-stage hostname resolved from a blockchain contract, evading takedown

Critical IDS malware/exfiltration alert with obfuscated JavaScript loader

Threat-intel hit on the primary domain itself (iclickfix malware) plus a multi-feed exploit-kit domain loaded as a resource

Social-engineering overlay impersonating Cloudflare to get Windows users to run commands in Terminal

Domain age information unavailable

Details

Page Title

Toronto Photographers | 1022 Studio

Scan Type

public

Favicon Hash

MMH3: 711153563

MD5: d656ac6fc171057b7c044d42efe1df69

Domain Name Analysis

The domain name '1022studio.com' uses the commercial generic top-level domain (.com) without a subdomain. The second-level label '1022studio' is 10 characters long with three vowels and three consonants, notching four digits. Breaking it apart gives two words: 1022, studio. Expect five characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

3.44s

Total Load Time

7.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:2,743 chars

Detector Agreement:100%

Website Classification

Primary Category

gambling betting91% confidence

Type: spa

Method: ml+structural

All Detected Categories

gambling betting

91%

entertainment media

90%

finance banking

53%

documentation technical

48%

corporate

35%

Detected Features

Articles

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
18	63.250.43.10	United States	AS22612Namecheap, Inc.
7	142.251.14.95Google · CDN	United States	AS15169Google LLC
7	142.251.110.97Google · CDN	United States	AS15169Google LLC
7	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
7	185.111.111.156	Frankfurt am Main, Hesse, Germany	AS212238Datacamp Limited
7	172.64.146.81Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	142.251.157.119Google · CDN	United States	AS15169Google LLC
7	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
7	157.240.0.6Facebook · CDN	Frankfurt am Main, Hesse, Germany	AS32934Facebook, Inc.
7	142.251.14.94Google · CDN	United States	AS15169Google LLC
151	20	-	-