ScanMalware.com

Security Scan Report: www.winsfordacademy.org.uk

Redirected to:
https://winsford.ht.school/
Site favicon
Submitted: May 23, 2026, 1:10:10 PMCompleted: May 23, 2026, 1:12:25 PMpubliccompleted
Loading additional data...

Summary

This website contacted 7 IPs in 3 countries across 8 domains to perform 99 HTTP transactions. The main domain is winsford.ht.school and was registered NaN years ago.

Submitted URL: http://www.winsfordacademy.org.uk

Effective URL: https://winsford.ht.school/Redirected

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

The site shows moderate risk due to unranked domains, a password‑only field, and heavy JS obfuscation, but lacks concrete malware or phishing indicators.

Risk Factors
Unranked domain claiming educational brand
Password‑only field suggests possible credential harvesting
High JavaScript obfuscation score
Domain change to a new, also unranked domain
Safety Factors
Domain age >15 years (well‑established)
No Indicators of Compromise matched in threat intel
No JavaScript malware YARA patterns detected
No network IDS alerts
Standard WordPress wp‑login.php form (not a custom phishing form)
Cross‑origin form identified as legitimate SSO flow
Domain age information unavailable

Details

Page Title

Winsford Academy

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

education learning

(65%)

Domain Information

Within the United Kingdom country-code top-level domain (.org.uk), 'www.winsfordacademy.org.uk' is registered, featuring subdomain 'www'. The second-level label 'winsfordacademy' is 15 characters long split between five vowels and ten consonants. Segmentation suggests 3 words: wins, ford, academy. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of http://www.winsfordacademy.org.uk

Page Load Overview

49.43s
Total Load Time
85
HTTP Requests
10
Domains
4.2 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-GB
Text Length:2,912 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning65% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
65%
forum community discussion
26%

Detected Features

Search

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
13142.251.20.95United States
AS15169Google LLC
1291.238.163.174United Kingdom
AS52148Enix Ltd
12192.178.183.95United States
AS15169Google LLC
12184.24.77.156Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
12142.251.14.95United States
AS15169Google LLC
12142.251.110.139United States
AS15169Google LLC
12184.24.77.154Frankfurt am Main, Hesse, Germany
AS20940Akamai International B.V.
857--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T10843F73390D814671357C7DCA1A1B318E8AAD23ADA078B66B5FF218C5FD4EA2485760F

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:1vAXyp9lbhRecUO1giJlNaMLcKpNJGDrLg+/2HsWvzu/U5H2v2TwbdUSMe6klwE3:1vAi1bbecUO1giJlNaglpNJGvLg+8sWU

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:60611:HLwZ2AWjlf1QCAABoAFAmC9ZsQBEwEAw2CAUKFFQAVMBoREoMRCoAARASLTDDLMZDxcAj66ySjh4KzAD1yqrIpYAQgAjgHp2

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data