Security Scan: Bewust Consulting

Summary

API

This view is built from:

Scan result: counts, verdicts, details, IPs, technologies, hashes/api/v1/result/265cf489-3b7a-40f8-89e1-7a119d4c22a2 Domain and IP registration (RDAP)/api/v1/rdap/265cf489-3b7a-40f8-89e1-7a119d4c22a2How often this domain was scanned/api/v1/domain/stats/bewustconsulting.com Scan history for this domain/api/v1/domain/history/bewustconsulting.com?limit=15

This website contacted 13 IPs in 2 countries across 10 domains to perform 92 HTTP transactions. The main domain is bewustconsulting.com and was registered 3 years 7 months ago.

Submitted URL: https://bewustconsulting.com

AI Security Verdict

Confirmed Scam

Confidence: 97%

Risk Score

Compromised site serving a ClickFix 'Human Verification' kit that impersonates Cloudflare and tricks Windows users into pasting a malicious Terminal command via an EtherHiding blockchain loader. Do not interact.

Risk Factors (5)

Fake Cloudflare-style 'Human Verification' overlay impersonating Cloudflare branding (needs to review your connection / Ray ID) that instructs visitors to open Windows Terminal via Win+X, paste with Ctrl+V and press Enter

Injected ClickFix kit on the domain, directing users to run attacker-supplied commands (malware/stealer delivery)

EtherHiding: blockchain-contract-based loader retrieving its next stage (Polygon RPC endpoints)

Obfuscated third-party script loading from hosts flagged in threat intelligence (interseq.at 'ek clearfake-1', browse-codes-enter.beer, 1rpc.io)

Primary domain flagged as malware by two independent feeds

Domain age information unavailable

Details

Page Title

Bewust Consulting

Scan Type

public

Favicon Hash

MMH3: 947324374

MD5: f21258d1aee5a5bbb5877f2102029c61

Domain Name Analysis

Domain 'bewustconsulting.com' uses the commercial generic top-level domain (.com) with no subdomain. The core label 'bewustconsulting' covers 16 characters holding five vowels versus 11 consonants. Segmentation suggests 4 words: be, wu, st, consulting. Expect 2 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Page Load Overview

10.34s

Total Load Time

2.5 MB

Total Size

Language Analysis

Primary Language

🇺🇸English

Code: en

Confidence:80%

Script:Latin

Direction:ltr

Detection Details

HTML Lang Attribute:en-US

Text Length:1,580 chars

Detector Agreement:67%

Website Classification

Primary Category

corporate business28% confidence

Type: spa

Method: ml+structural

All Detected Categories

corporate business

28%

Detected Features

No structural features detected

Domain & IP Information

Requests	IP Address	Location	AS Autonomous System
8	162.210.96.126	United States	AS14555LiquidNet US LLC
7	192.178.183.95Google · CDN	United States	AS15169Google LLC
7	104.21.3.152Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	172.66.164.193Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	192.178.183.94Google · CDN	United States	AS15169Google LLC
7	152.236.9.75	Frankfurt am Main, Hesse, Germany	AS396356Latitude.sh
7	35.227.193.242Google · CDN	Kansas City, Missouri, United States	AS396982Google LLC
7	178.16.52.101	Frankfurt am Main, Hesse, Germany	AS202412Omegatech LTD
7	172.67.130.228Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
7	104.20.38.203Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
92	13	-	-