Security Scan: WinWin Cookware: Premium Tempered Glass Lids

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/adbb5a5f-0d7d-4dc5-acd0-2ab397642a14 Domain and IP registration (RDAP)/api/v1/rdap/adbb5a5f-0d7d-4dc5-acd0-2ab397642a14How often this domain was scanned/api/v1/domain/stats/winwincookware.com Scan history for this domain/api/v1/domain/history/winwincookware.com?limit=15

This website contacted 29 IPs in 3 countries across 15 domains to perform 117 HTTP transactions. The main domain is winwincookware.com and was registered 3 years 2 months ago.

Submitted URL: https://winwincookware.com

AI Security Verdict

Confirmed Scam

Confidence: 96%

Risk Score

Legitimate-looking cookware manufacturer site compromised with the ClickFix/EtherHiding kit: packed script pulls a fake 'Human Verification' overlay from a Polygon contract and tells Windows users to run a Terminal command. Do not visit.

Risk Factors (5)

Injected ClickFix social-engineering overlay instructing Windows users to run a Terminal command (Win+X) that installs malware

EtherHiding blockchain-based payload resolution used to evade takedown

Heavily obfuscated JavaScript with 9 eval() and 2 Function() constructor calls plus packed contract loader

Exploit-kit-linked script host cloud-browse.codes loaded on the page

Indicators of Compromise on the primary domain for the same malware family

Domain age information unavailable

Details

Page Title

WinWin Cookware: Premium Tempered Glass Lids & Kitchenware Manufacturer

Scan Type

public

Favicon Hash

MMH3: -1629734129

MD5: ecb3c28ef8895f0ef2f3fbce1294ba87

Domain Name Analysis

Within the commercial generic top-level domain (.com), 'winwincookware.com' is registered while skipping any subdomain. The core label 'winwincookware' covers 14 characters containing six vowels alongside eight consonants. Splitting it apart reveals 4 words: win, win, cook, ware. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

4.65s

Total Load Time

24.7 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:9,895 chars

Detector Agreement:80%

Website Classification

Primary Category

documentation technical48% confidence

Type: spa

Method: ml+structural

All Detected Categories

documentation technical

48%

corporate

35%

Detected Features

OG: website

Schema.org

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
5	46.202.138.63	Jakarta, Jakarta, Indonesia	AS47583Hostinger International Limited
4	142.251.13.97Google · CDN	United States	AS15169Google LLC
4	142.251.156.4Google · CDN	United States	AS15169Google LLC
4	216.239.34.36Google · CDN	United States	AS15169Google LLC
4	142.251.154.4Google · CDN	United States	AS15169Google LLC
4	142.251.152.4Google · CDN	United States	AS15169Google LLC
4	142.251.155.4Google · CDN	United States	AS15169Google LLC
4	142.251.110.94Google · CDN	United States	AS15169Google LLC
4	142.251.14.157Google · CDN	United States	AS15169Google LLC
4	142.251.14.148Google · CDN	United States	AS15169Google LLC
117	29	-	-