Security Scan Report: bw-automation.net

Redirected to:
https://www.bw-automation.net/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 13 IPs in 4 countries across 7 domains to perform 80 HTTP transactions. The main domain is bw-automation.net and was registered 12 years ago.

Submitted URL: https://bw-automation.net

Effective URL:
https://www.bw-automation.net/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 88%

9
Risk Score

Legitimate-looking Belgian automation site whose primary domain is flagged as 'clearfake' malware by two independent threat feeds, with page scripts contacting BSC testnet RPC nodes — clear malware/drainer hosting; avoid.

Risk Factors (4)
Multi-source corroborated content-malware threat-intel match (clearfake) on the page's primary domain
Multiple malware IoC matches on the primary domain
Blockchain testnet RPC connections from page scripts (wallet drainer / clearfake pattern)
Inline scripts with encoding/decoding functions
Domain age information unavailable

Details

Page Title

Home - BW-Automation

Scan Type

public

Domain Name Analysis

The domain name 'bw-automation.net' uses the network infrastructure generic top-level domain (.net) while skipping any subdomain. The core label 'bw-automation' covers 13 characters holding six vowels versus 6 consonants, notching 1 hyphen. It segments into 3 words: b, w, automation. Median word length comes out to one character. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://bw-automation.net

Page Load Overview

5.73s
Total Load Time
3.5 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:60%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:fr-BE
Text Length:986 chars
Detector Agreement:100%
Language mismatch: Declared as fr-BE but detected as en

Website Classification

Primary Category

technology software66% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
66%
documentation technical
45%
corporate
35%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
846.30.213.172Copenhagen, Capital Region, Denmark
AS51468One.com A/S
6142.251.110.95Google · CDNUnited States
AS15169Google LLC
665.21.110.156Helsinki, Uusimaa, Finland
AS24940Hetzner Online GmbH
63.33.196.84Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
652.223.48.152Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
615.197.152.159Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
615.197.198.189Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
6172.66.150.162Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
6142.215.53.55Washington, District of Columbia, United States
AS15830Equinix (EMEA) Acquisition Enterprises B.V.
6104.20.46.180Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
8013--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C5344BA1B79024392137837EF2DBB618513EE663D64D65E9F0BD400DC9C9F9622E231E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:sR2xggN1Btu0X0EbIvuQn0YIpGuL+t2dan3bv5+MJr8R3Cf//Xhk:M2xVNvyRnmv+tIkL8

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:236731:iUVCqoQIFBgodjQACDFlZAkAOkBpCvtCZChAAVJCVrUEhCRSN0AAHwgJQQOEEGAmCEAxcaUBQbKDBExZUSQAEuxYwBhnwsgS

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:000000000000ffff
Perceptual Hash:bf17e23e804a36a5
Difference Hash:ad6e68707635258e
Wavelet Hash:078786188380ffff
Color Hash:#d22d51

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data