ScanMalware.com

Security Scan Report: docsmoonstudioclayworks.online

Redirected to:
https://testmy.net/?testServer=dallas3
Site favicon
Submitted: Sep 13, 2026, 1:47:57 AMCompleted: Sep 13, 2026, 1:49:59 AMpubliccompleted

Summary

This website contacted 58 IPs in 4 countries across 44 domains to perform 2 HTTP transactions. The main domain is testmy.net and was registered 3 years 2 months ago.

Submitted URL: https://docsmoonstudioclayworks.online

Effective URL: https://testmy.net/?testServer=dallas3Redirected

AI Security Verdict

Moderate Risk

Confidence: 72%

5
Risk Score

Rendered page is the genuine TestMy.net speed test (no forms, no impersonation), but the entry domain is multi-source flagged as astaroth malware, making the redirect chain itself unsafe.

Risk Factors
Multi-source malware IoC (astaroth) tied to the entry domain the user navigated to
Redirect funnel from a flagged domain to an unrelated destination
Safety Factors
Final destination testmy.net is a legitimate, long-established Internet speed-test service (#62292 Umbrella)
No credential, login, or payment fields anywhere on the page (0 forms)
No JavaScript malware / YARA patterns, no network IDS alerts
Cloudflare bot-verification interstitial consistent with legitimate site protection
Established domain (9104 days old) with no strong malicious indicators — risk clamped from 7 to 5
Domain age information unavailable

Details

Page Title

Internet Speed Test

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(66%)

Domain Information

Domain 'docsmoonstudioclayworks.online' uses the modern generic top-level domain (.online) and has no subdomain. The core label 'docsmoonstudioclayworks' covers 23 characters split between eight vowels and 15 consonants. Word splitting yields five words: docs, moon, studio, clay, works. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://docsmoonstudioclayworks.online

Page Load Overview

18.76s
Total Load Time
111
HTTP Requests
44
Domains
1.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:81,360 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software66% confidence
Type: static
Method: ml+structural

All Detected Categories

technology software
66%
corporate
25%

Detected Features

OG: website

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
54104.26.5.115Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
183.229.17.71Dallas, Texas, United States
AS62240Clouvider Limited
1192.178.183.97Google · CDNUnited States
AS15169Google LLC
1142.251.13.95Google · CDNUnited States
AS15169Google LLC
1104.16.79.73Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
118.245.86.16Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
1104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
1142.251.20.95Google · CDNUnited States
AS15169Google LLC
1142.251.110.95Google · CDNUnited States
AS15169Google LLC
134.202.35.225Aws · CLOUDAshburn, Virginia, United States
AS14618Amazon.com, Inc.
11158--

Page Statistics

111
Requests
43
Unique Domains
2.1 MB
Total Size

Detected Technologies2

AlmaLinux
40%
Google Tag Manager
30%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T155F160A3AB0D1C0A31119584646770C8C53F5C36EA149DE6FDAF21BE7BCD6E8843B672

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

96:TVbO7VORf4b41tPCJ6THUcztDvSfxAKoy3eYbOTQuNapuczvwu/9SGhnFem49SYk:xgOR4a+6THUODv8Locuc9/9ST9SYS5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:8116:KIRBlFhCBCABEyjUXAcIoFYwQAGGMIAQAJgQq2EQssZIoiFUDIt4FAZFgGgK/iE8igMCIdCAxhEYgxixhQnABg5QKIgGgoCu

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:dfc3c7ffffffffe7
Perceptual Hash:b03832cec6cfc6c6
Difference Hash:101e1c100000000c
Wavelet Hash:fcc0c0f8f0f0fcc0
Color Hash:#3b3a78

Other Hashes

Crop Resistant:101e1c100000000c

Scan History

Scan history not available

Unable to load historical scan data