ScanMalware.com

Security Scan Report: bwesm.cherwellondemand.com

Redirected to: https://bwesm.cherwellondemand.com/CherwellPortal/IT?_=2faaa9c6#0

Submitted: Jan 25, 2026, 5:16:26 AMCompleted: Jan 25, 2026, 5:18:00 AMpubliccompleted
Loading additional data...

Summary

This website contacted 3 IPs in 1 country across 3 domains to perform 9 HTTP transactions. The main domain is bwesm.cherwellondemand.com and was registered NaN years ago.

Submitted URL: https://bwesm.cherwellondemand.com

Effective URL: https://bwesm.cherwellondemand.com/CherwellPortal/IT?_=2faaa9c6#0Redirected

The Cisco Umbrella rank of the primary domain is #71,275 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 95%

1
Risk Score

Legitimate Cherwell portal with minimal risk

Safety Factors
Well‑established domain (>17 years)
High Cisco Umbrella ranking
No malicious Indicators of Compromise
No malware or phishing signatures detected
Brand matches official Cherwell service domain
Domain age information unavailable

Details

Page Title

Portal - Not Logged In - IT: Cherwell Service Management

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

unknown

(0%)

Domain Information

Within the commercial generic top-level domain (.com), 'bwesm.cherwellondemand.com' is registered and includes subdomain 'bwesm'. Its registrable label 'cherwellondemand' stretches across 16 characters holding 5 vowels versus eleven consonants. It segments into 3 words: cherwell, on, demand. Median word length comes out to 6 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bwesm.cherwellondemand.com

Page Load Overview

7.26s
Total Load Time
96
HTTP Requests
4
Domains
2.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-US
Text Length:575 chars
Detector Agreement:100%

Website Classification

Primary Category

unknown0% confidence
Type: spa
Method: structural

All Detected Categories

No categories detected

Detected Features

Login Form

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
32104.16.79.73United States
AS13335Cloudflare, Inc.
32172.217.18.8United States
AS15169Google LLC
32162.159.137.37United States
AS13335Cloudflare, Inc.
963--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A4334B758D102A37A01F06EDB0EAD74D2285C207E3019C6075E99B9883E7F5A4F7BB5B

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

768:zYdkXIWCThubVQjW4rPlI/MeXoSwk229VuZdDNP0ajHe3+NJAFMOqcHZDJqvcWfk:zYrDrPlI/Me4SOA8JDV8rb

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:54797:BpNsYBouhAMkmCgABJUhaCFH9imE0NgyiPACcJBgEiBiAUhGMAZwqQpAh1AzzC0sljDcTBS9oAkimYA0XMRHGDBgCBRqQ1ES

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00ffffffffff0000
Perceptual Hash:f79d6af50a48152a
Difference Hash:330a4800dd06010d
Wavelet Hash:00efffffff800000
Color Hash:#1f934c

Other Hashes

Crop Resistant:330a4800dd06010d,0001014120202121,0600c18f0e040049

Scan History

Scan history not available

Unable to load historical scan data