ScanMalware.com

Security Scan Report: geowest.at

Redirected to:
https://www.geowest.at/
Site favicon
Submitted: Oct 9, 2026, 8:48:30 AMCompleted: Oct 9, 2026, 8:49:30 AMpubliccompleted

Summary

API
This view is built from:
Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/1adbf278-469a-459a-9336-2d6ed4753914Domain and IP registration (RDAP)/api/v1/rdap/1adbf278-469a-459a-9336-2d6ed4753914Certificate Transparency/api/v1/ct/geowest.atHow often this domain was scanned/api/v1/domain/stats/geowest.atScan history for this domain/api/v1/domain/history/geowest.at?limit=15

This website contacted 22 IPs in 2 countries across 11 domains to perform 131 HTTP transactions. The main domain is geowest.at and was registered 21 years ago.

Submitted URL: https://geowest.at

Effective URL:

https://www.geowest.at/
Redirected

AI Security Verdict

Moderate Risk

Confidence: 78%

5
Risk Score

Long-established Austrian geology firm's site appears compromised: threat intel flags the primary domain as a malware loader and injected prescription-drug spam links were found on its own paths. No credential or payment forms.

Risk Factors (4)
Content-malware indicator (malware loader) on the primary domain per threat intel
Injected illegal pharmaceutical/pharmacy spam links hosted on the site's own paths
Injected off-topic link-spam content typical of a compromised CMS
Circular redirect chain
Safety Factors (6)
Domain is well established (registered 2014, ~12 years old)
Self-branding: title/meta/OG name 'Geowest' matches the domain — no impersonation of another entity
No credential, password or payment fields (forms = 1, password fields = 0, payment fields = 0)
Content describes a genuine geology/engineering consultancy in Innsbruck, Austria
No YARA malware hits, no IDS alerts, no cross-origin credential exfiltration
Established domain (4635 days old) with no strong malicious indicators — risk clamped from 8 to 5
Domain age information unavailable

Details

Page Title

Home - Geowest

Scan Type

public

Domain Name Analysis

The domain name 'geowest.at' uses the Austrian country-code top-level domain (.at) without a subdomain. Its registrable label 'geowest' stretches across 7 characters holding three vowels versus four consonants. Tokenizing the label suggests 2 words: geo, west. Average segment length settles at 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://geowest.at

Page Load Overview

8.74s
Total Load Time
12.6 MB
Total Size

Language Analysis

Primary Language

🇩🇪German
Code: de
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:de
Text Length:4,334 chars
Detector Agreement:75%

Website Classification

Primary Category

documentation technical71% confidence
Type: spa
Method: ml+structural

All Detected Categories

documentation technical
71%
corporate business
44%
corporate
35%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2677.244.243.53Vienna, Vienna, Austria
AS47692Nessus GmbH
5142.251.127.95Google · CDNUnited States
AS15169Google LLC
5142.251.20.97Google · CDNUnited States
AS15169Google LLC
5142.251.153.119Google · CDNUnited States
AS15169Google LLC
5192.178.183.94Google · CDNUnited States
AS15169Google LLC
5216.239.34.36Google · CDNUnited States
AS15169Google LLC
5142.251.151.119Google · CDNUnited States
AS15169Google LLC
5142.251.14.120Google · CDNUnited States
AS15169Google LLC
5172.217.114.4Google · CDNUnited States
AS15169Google LLC
5172.217.116.4Google · CDNUnited States
AS15169Google LLC
13122--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T124630A7250994837A2A783E864A6B39DF166953AC6C4CBF4F2FE019C4FD5E9300B365C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:4nSypTZ1CJ6xqBOYqOPGPNn77B9pHxP1XDh/RDN/HnV5zNJrL1NJ92i4dtPkQNJY:4nL9Z1C4xqBMPPNtktPkQNsuXYWTCyu

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:70237:AmAjABA0prBQig/LJNAEgBCQNAJgUqFKrFxMBNQTCoDCUCgysxBEAsgQQOFEFiABCQlSQwaIqCXQRBgJaExhoCAPwkmoDREp

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fefee7e7e7ffffff
Perceptual Hash:f755ddd573208822
Difference Hash:0000040808000000
Wavelet Hash:0e0e2626c6decece
Color Hash:#7995d2

Other Hashes

Crop Resistant:0000040808000000

Scan History

Scan history not available

Unable to load historical scan data