Security Scan Report: bcdevelopment.de

Redirected to:
https://www.bcdevelopment.de/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 5 IPs in 2 countries across 6 domains to perform 133 HTTP transactions. The main domain is bcdevelopment.de.

Submitted URL: https://bcdevelopment.de

Effective URL:
https://www.bcdevelopment.de/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 96%

10
Risk Score

Legitimate bcd GmbH consulting site is compromised and serves a ClearFake/ClickFix chain: a fake Cloudflare 'I'm not a robot' overlay plus blockchain-loaded malware — confirmed by kit roster, YARA and critical IDS alerts. Do not visit or follow its instructions.

Risk Factors (5)
Compromised legitimate site injecting ClearFake/ClickFix blockchain-loaded malware chain
Fake Cloudflare 'Human Verification' overlay (Ray ID shown) impersonating Cloudflare to social-engineer Windows users into running Terminal commands
EtherHiding: next-stage server addresses retrieved from a Polygon smart contract via public RPC nodes
Rival-kit cleanup script that strips other overlays and blocks navigation for up to 45 seconds
Threat-intel matches for loaded resources (cloud-browse.codes, rpc-mainnet.matic.quiknode.pro, ek clearfake) across multiple feeds
Domain age information unavailable

Details

Page Title

Home - bcd

Scan Type

public

Domain Name Analysis

Domain 'bcdevelopment.de' uses the German country-code top-level domain (.de) with no subdomain. The second-level label 'bcdevelopment' is 13 characters long split between 4 vowels and nine consonants. It segments into 2 words: bc, development. Average segment length settles at 6.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bcdevelopment.de

Page Load Overview

7.75s
Total Load Time
7.0 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:11,358 chars
Detector Agreement:100%

Website Classification

Primary Category

corporate70% confidence
Type: spa
Method: structural

All Detected Categories

corporate
70%

Detected Features

OG: activity
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
29217.160.0.92Germany
AS8560IONOS SE
26142.251.20.95Google · CDNUnited States
AS15169Google LLC
26150.136.141.142Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
26142.251.14.97Google · CDNUnited States
AS15169Google LLC
26178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
1335--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A1E32B329848583752234AD5B432AB59B0FFD22ACA03C9E8F3FD91689BC6FE5511770D

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:6mZNVAw94p2NOgWMsoOaj/FsH1sOvbtbQTjgv5m/KMJF9C72FJdl93L3DJvNd5tP:Yw9229jdy1sOvbtbQTjNoYU8ajO

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:150112:URMAAR0gAqStCUFw8KAE5xAZBDIgQAQ1Sh0AjEIHqtRDkiIRIGaZJgF8RK2CBWoUB6IRk8EIBsoGEAIqQAAgWxOC4MBBAU5x

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:c7c7c3c3fffffff7
Perceptual Hash:b03023c7cecccdcd
Difference Hash:0c1c161600000008
Wavelet Hash:3f070303f0f0ff00
Color Hash:#c7e06c

Other Hashes

Crop Resistant:0c1c161600000008

Scan History

Scan history not available

Unable to load historical scan data