ScanMalware.com

Security Scan Report: www.hwfire.org.uk

Site favicon
Submitted: Jan 9, 2026, 9:38:30 PMCompleted: Jan 9, 2026, 9:44:39 PMpubliccompleted
Loading additional data...

Summary

This website contacted 14 IPs in 4 countries across 6 domains to perform 59 HTTP transactions. The main domain is hwfire.org.uk and was registered NaN years ago.

Submitted URL: https://www.hwfire.org.uk/

AI Security Verdict

High Risk

Confidence: 82%

7
Risk Score

Site appears to impersonate Facebook on an unrelated domain, indicating a high‑risk phishing page.

Risk Factors
Brand impersonation / typosquatting
Unranked domain presenting a major brand
Domain age information unavailable

Details

Page Title

Home | Hereford & Worcester Fire and Rescue Service

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

government public service

(45%)

Domain Information

Within the United Kingdom country-code top-level domain (.org.uk), 'www.hwfire.org.uk' is registered and includes subdomain 'www'. The registrable portion 'hwfire' spans 6 characters containing 2 vowels alongside four consonants. It segments into three words: h, w, fire. Expect 1 character per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://www.hwfire.org.uk/

Page Load Overview

90.09s
Total Load Time
59
HTTP Requests
6
Domains
3.3 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en-GB
Text Length:4,363 chars
Detector Agreement:100%

Website Classification

Primary Category

government public service45% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
45%
corporate
35%

Detected Features

Search
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
40162.159.134.42United States
AS13335CLOUDFLARENET
6192.0.77.48San Francisco, California, United States
AS2635AUTOMATTIC
413.107.246.44United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
4142.250.186.99United States
AS15169GOOGLE
452.242.103.142Boydton, Virginia, United States
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
420.250.198.32Zurich, Zurich, Switzerland
AS8075MICROSOFT-CORP-MSN-AS-BLOCK
4104.18.18.62United States
AS13335CLOUDFLARENET
4142.251.208.8United States
AS15169GOOGLE
4216.239.32.36United States
AS15169GOOGLE
474.125.133.155United States
AS15169GOOGLE
5914--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T16DF31BE2422C6CBAEA0B536CB56DB305E1E79A41CB441CD2F4FCA05567CDC7A48B634E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:/Us0O79ap+fxdOkMagMqjTf4hwPXisqcVGKucVGKKeKgPDZy19/PlawVv:/Us0p+dOkMacgaTKLawVv

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:167689:czQFVQpSgRgQGgAiNAgDKUCIYCAybEDEAJgyIwZoCEBgl+sQQAlGhQghKgA49kAxDKAiAMbjBeQqD4IGpIAxISQABDhACDIA

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fdff83a323ffffff
Perceptual Hash:a766989867651d35
Difference Hash:4d25664e4e738e06
Wavelet Hash:00f40103233bffff
Color Hash:#bf4040

Other Hashes

Crop Resistant:4d25664e4e738e06,73378c88986c31b1

Scan History

Scan history not available

Unable to load historical scan data