ScanMalware.com

Security Scan Report: winkyface.studio

Site favicon
Submitted: Completed: publiccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/c0783921-3288-4e46-8d87-20c8289f1b7eDomain and IP registration (RDAP)/api/v1/rdap/c0783921-3288-4e46-8d87-20c8289f1b7eHow often this domain was scanned/api/v1/domain/stats/winkyface.studioScan history for this domain/api/v1/domain/history/winkyface.studio?limit=15
This website contacted 3 IPs in 2 countries across 3 domains to perform 62 HTTP transactions. The main domain is winkyface.studio and was registered 6 years ago.

Submitted URL: https://winkyface.studio

AI Security Verdict

High Risk

Confidence: 62%

7
Risk Score

Established, self-branded design-studio portfolio with no forms, no malware scripts and no IDS alerts, but the primary domain carries a single-source, unverified threat-intel report of an 'unknown rat' malware family, which sets a HIGH_RISK floor.

Risk Factors (1)
Primary domain flagged in threat intelligence as distributing an 'unknown rat' malware family (single-source, unverified community submission)
Domain age information unavailable

Details

Page Title

WiNKYFACE ;) — A Graphic Design Studio

Scan Type

public

Domain Name Analysis

The domain 'winkyface.studio' uses the .studio top-level domain and has no subdomain. The second-level label 'winkyface' is 9 characters long with three vowels and 6 consonants. Breaking it apart gives two words: winky, face. Expect 4.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

WINKYFACE WiNKYFACE:) The Studio WiNKYFACE is a full-service design studio working across branding, art direction and digital. We create visual identities with a distinct balance of play and struct...

Page Load Overview

6.78s
Total Load Time
63.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-GB
Text Length:11,454 chars
Detector Agreement:100%

Website Classification

Primary Category

blog personal website49% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

blog personal website
49%
government public service
47%
education learning
45%
healthcare medical
42%
entertainment media
39%

Detected Features

OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2277.111.243.54Copenhagen, Capital Region, Denmark
AS51468One.com A/S
20142.251.20.97Google · CDNUnited States
AS15169Google LLC
20216.239.32.36Google · CDNUnited States
AS15169Google LLC
623--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1985474B29D080819832FCB85E07136E9629AD770FA0B6CE4F5F754AC5BC1F9510E5B8E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:cMgHgMowgAgPOe4uW8jkdeSQX/Wy6ZW2IEOM9wNB4vbPS:jgHgjBPOe4uW8jkdeSQX/Wy6ZW2IEOM0

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:279250:NtCpyKGJQoAjBOdCAI8Af6kSQ6oPZJcCQsyoQFg9+BSQaAH6MgIACALMiU0AHkSG8Q4AUFkQFH6ikwHhE4VABUTGhQAfmBoW

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data