ScanMalware.com

Security Scan Report: lk.wyincc.com

Submitted: Sep 12, 2026, 7:48:06 PMCompleted: Sep 12, 2026, 7:48:56 PMpubliccompleted

Summary

This website contacted 4 IPs in 1 country across 3 domains to perform 2 HTTP transactions. The main domain is lk.wyincc.com and was registered 18 years ago.

Submitted URL: https://lk.wyincc.com

AI Security Verdict

High Risk

Confidence: 85%

8
Risk Score

Domain is attributed to APT UNC6353 malware across 2 independent feeds; a content-malware Indicators of Compromise hit on the primary domain forces HIGH_RISK despite the benign-looking WAF block page.

Risk Factors
Domain flagged for APT UNC6353 malware infrastructure by 2 corroborated feeds
Domain not present in Cisco Umbrella top 1M
Access-denied WAF interstitial masks the actual hosted content
Domain age information unavailable

Details

Page Title

Error Pagesecondary capture

Scan Type

public

Language

🇻🇳

VI

(50% confidence)

Category

cryptocurrency blockchain

(100%)

Domain Information

Within the commercial generic top-level domain (.com), 'lk.wyincc.com' is registered and includes subdomain 'lk'. The second-level label 'wyincc' is 6 characters long split between 1 vowel and five consonants. Segmentation suggests 3 words: wy, in, cc. Median word length is two characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lk.wyincc.com

Page Load Overview

2.10s
Total Load Time
8
HTTP Requests
3
Domains
58 KB
Total Size

Language Analysis

Primary Language

🇻🇳Vietnamese
Code: vi
Confidence:50%
Script:Unknown
Direction:ltr

Detection Details

Language Code:vi
Detection Confidence:50%
Script Type:Unknown
Text Length:1,401 chars
Detector Agreement:100%

Website Classification

Primary Category

cryptocurrency blockchain100% confidence
Type: static
Method: ml+structural

All Detected Categories

cryptocurrency blockchain
100%
blog personal website
100%
government public service
100%
documentation technical
100%
technology software
100%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2142.251.127.95Google · CDNUnited States
AS15169Google LLC
265.8.131.13Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
265.8.131.26Cloudfront · CDNUnited States
AS16509Amazon.com, Inc.
2142.251.14.94Google · CDNUnited States
AS15169Google LLC
84--

Page Statistics

8
Requests
3
Unique Domains
64.6 KB
Total Size

Detected Technologies2

Amazon Web Services
50%
Amazon CloudFront
40%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16A115657B1A1CC2D0374B7B75C62B288E879520C5EE434801945C769BC74DD38453EE8

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

24:haHASPyF+PUgRRigysUqgu9RRpgn2FYtiQUYH4G:yPf9mgysUqgEVk2WtiQlD

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:885:ABAAAAAAAIAAAAAAAAAAAAAAAAAAAAAACAAAgCAKAAAAQEAAAAAAAAAECIAAAAEAAAAAAAAACAAAEAABAAAAAQAAAAwAAAAA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:ffc3e7f7d7c3ffff
Perceptual Hash:b467cb38c98998cb
Difference Hash:020c0c0414940000
Wavelet Hash:f0c0e4c0c0c0f0f0
Color Hash:#40bf99

Other Hashes

Crop Resistant:020c0c0414940000

Scan History

Scan history not available

Unable to load historical scan data