ScanMalware.com

Security Scan Report: preview.webflow.com

Site favicon
Submitted: Nov 3, 2025, 9:38:17 PMCompleted: Nov 3, 2025, 9:39:19 PMpubliccompleted
Loading additional data...

Summary

This website contacted 56 IPs in 2 countries across 21 domains to perform 88 HTTP transactions. The main domain is preview.webflow.com.

Submitted URL: https://preview.webflow.com/preview/bt-active?utm_medium=preview_link&utm_source=designer&utm_content=bt-active&preview=836a803666830c40c17a51f4efc59311&workflow=sitePreview

AI Security Verdict

Low Risk

Confidence: 85%

3
Risk Score

Low risk site; external script flagged but no direct threats

Risk Factors
Reference to suspicious external domain ipstack.com
Safety Factors
Hosted on reputable Webflow service
No forms collecting sensitive data
No redirects or URL manipulation
Domain age information unavailable

Details

Page Title

Webflow - BT ACTIVE

Scan Type

public

Language

🇺🇸

English

(56% confidence)

Category

technology software

(82%)

Domain Information

The domain name 'preview.webflow.com' uses the commercial generic top-level domain (.com) and includes subdomain 'preview'. The second-level label 'webflow' is 7 characters long containing two vowels alongside five consonants. It segments into two words: web, flow. The median word length lands at 3.5 characters. 'web' is most common in Chinese (Pinyin) usage. Usage also turns up in English and Vietnamese contexts. Taken together, it feels Chinese (Pinyin).

Screenshot

Security scan screenshot of https://preview.webflow.com/preview/bt-active?utm_medium=preview_link&utm_source=designer&utm_content=bt-active&preview=836a803666830c40c17a51f4efc59311&workflow=sitePreview

Page Load Overview

25.72s
Total Load Time
88
HTTP Requests
21
Domains
13.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:56%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:56%
Script Type:Latin
Text Length:198 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software82% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

technology software
82%
documentation technical
79%
social media network
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
33104.18.30.133United States
AS13335CLOUDFLARENET
154.236.119.246Ashburn, Virginia, United States
AS14618AMAZON-AES
1108.138.26.93United States
AS16509AMAZON-02
1142.250.186.170United States
AS15169GOOGLE
1104.18.34.147United States
AS13335CLOUDFLARENET
1146.75.121.21Frankfurt am Main, Hesse, Germany
AS54113FASTLY
113.226.247.220United States
AS16509AMAZON-02
113.32.121.102New York, New York, United States
AS16509AMAZON-02
1172.64.153.109United States
AS13335CLOUDFLARENET
154.209.215.36Ashburn, Virginia, United States
AS14618AMAZON-AES
8856--

Detected Technologies4

X-UA-Compatible
100%
HSTS
40%
Webflow
20%
PartnerStack
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T133B4B6A8E0F3A53A417F7072D19A2B0A23A7D30723DE3FF3601DA0A45B5D95D5D13A98

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

12288:gNDtB+9L9zwv4pRyxl49/2xXupdU1wqL1lBOGDll:wL+9tU1wqL1lBOGDll

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:495788:SQVBMr9GRqRAxGoDgBcCCAxyAEyqgGbDIJgbwyXQeKAnKJgwFGAZEMpShUEIYAQJjqUVARFAQZNKgwQujYwOgILVBgInEQIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:N/A
Perceptual Hash:N/A
Difference Hash:N/A
Wavelet Hash:N/A
Color Hash:N/A

Other Hashes

Crop Resistant:N/A

Scan History

Scan history not available

Unable to load historical scan data