Security Scan Report: wingaraag.com.au

Site favicon
Submitted: Completed: publiccompleted
This website contacted 7 IPs in 3 countries across 8 domains to perform 178 HTTP transactions. The main domain is wingaraag.com.au and was registered 2 weeks ago.

Submitted URL: https://wingaraag.com.au

AI Security Verdict

High Risk

Confidence: 92%

9
Risk Score

Site presents as Wingara AG but carries an analyst-vetted ClickFix/EtherHiding malware injection with obfuscated blockchain loader, critical IDS malware alerts and Indicators of Compromise — likely a compromised or re-registered domain. Do not interact.

Risk Factors (5)
Compromised page injecting a ClickFix/EtherHiding loader that fetches its next stage from a smart contract
Obfuscated JavaScript hiding malicious blockchain-based infrastructure hosts
Critical network Intrusion Detection System malware alerts tied to this page's traffic
Multi-source Indicators of Compromise match on the third-party resource zvh4.com and a single-source loader report on the primary domain
Very recently registered domain (≤1 day) hosting established-company branding
Domain age information unavailable

Details

Page Title

Wingara AG - Unlocking value in protein supply chains

Scan Type

public

Domain Name Analysis

The domain 'wingaraag.com.au' uses the Australian country-code top-level domain (.com.au) while skipping any subdomain. The registrable portion 'wingaraag' spans 9 characters split between four vowels and five consonants. Segmentation suggests 3 words: wing, ara, ag. Median word length is three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://wingaraag.com.au

Page Load Overview

21.78s
Total Load Time
3.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-AU
Text Length:4,092 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service46% confidence
Type: spa
Method: ml+structural

All Detected Categories

government public service
46%
corporate
35%
news media journalism
34%
healthcare medical
30%
adult content
30%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2843.229.63.31Sydney, New South Wales, Australia
AS133159Mammoth Media Pty Ltd
25172.217.208.95Google · CDNUnited States
AS15169Google LLC
25192.0.76.3San Francisco, California, United States
AS2635Automattic, Inc
25104.26.13.42Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
25192.178.183.94Google · CDNUnited States
AS15169Google LLC
25146.19.24.104Poland
AS201814MEVSPACE sp. z o.o.
25188.114.97.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1787--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T160F319735518102A5217278AE1A8FE5CA1B7E2A4FF87CED5F7BC131C97C5F9A0123A18

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:/6aRdHau/TpFnEkwkGQANc7bA5QbfhNRDFryill4I5euCJAxNpUttOgU1BCBPrJA:/6aRdHZnEhFQf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:161878:RAGmSKAiMAFoEkIL4Bi0J8gVnErDEMKAqaEHADuoqBRgxRJCAAAIlhNljCggNJXBRUBSatISVLhiTJEARFCAkAiAEtAxaW+w

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fff9797f0000ffff
Perceptual Hash:8949f77e1280267f
Difference Hash:e443cbd373750000
Wavelet Hash:ff00417b0000ffff
Color Hash:#3a7867

Scan History

Scan history not available

Unable to load historical scan data