Security Scan Report: flowwave.co

Redirected to:
https://www.flowwave.co/
Site favicon
Submitted: Completed: publiccompleted
This website contacted 6 IPs in 2 countries across 6 domains to perform 66 HTTP transactions. The main domain is flowwave.co and was registered 1 year 10 months ago.

Submitted URL: https://flowwave.co

Effective URL:
https://www.flowwave.co/
Redirected

AI Security Verdict

Confirmed Scam

Confidence: 92%

9
Risk Score

Established payments site is compromised: injected ClickFix 'Human Verification' overlay (Win+X -> Terminal) plus EtherHiding malware alerts and multi-source threat-intel hits on its resources. Do not interact.

Risk Factors (5)
Analyst-vetted ClickFix Win+X -> Terminal social-engineering overlay injected into the page
ET MALWARE EtherHiding Exfil M2 critical network alerts (x3) — blockchain-embedded malware C2/exfiltration
Fake Cloudflare-style 'Human Verification' / Ray ID prompt shown to visitors (page claims 'www.flowwave.co needs to review the security of your connection')
Multi-source threat-intel match on both this domain ('unknown loader (malware)') and resources it loads
Spamhaus DROP-listed inbound traffic on the host network
Domain age information unavailable

Details

Page Title

Home - Flowwave

Scan Type

public

Domain Name Analysis

Within the Colombian country-code top-level domain (.co), 'flowwave.co' is registered and has no subdomain. Its registrable label 'flowwave' stretches across 8 characters holding three vowels versus five consonants. Word splitting yields 2 words: flow, wave. Expect 4 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://flowwave.co

Page Load Overview

8.39s
Total Load Time
1.0 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en-US
Text Length:3,876 chars
Detector Agreement:75%

Website Classification

Primary Category

finance banking86% confidence
Type: spa
Method: ml+structural

All Detected Categories

finance banking
86%
corporate business
79%
technology software
65%
government public service
57%
cryptocurrency blockchain
45%

Detected Features

OG: article
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
11185.207.106.39Nuremberg, Bavaria, Germany
AS197540netcup GmbH
11172.66.164.193Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11104.26.4.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11132.145.155.63Oracle · CLOUDAshburn, Virginia, United States
AS31898Oracle Corporation
11104.26.5.88Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
11178.16.52.101Frankfurt am Main, Hesse, Germany
AS202412Omegatech LTD
666--

Detected Technologies6

WordPressv7.1.3
100%
JQueryv3.7.1
100%
50%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T171B394723D8B582A224F02DF5017320D60CBDEF6EA12A5F5F6B69025A6F4DD077E3225

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:kDypw2MJ7BJ7RJ7kJ7PJ7kQBoYSBWtGT68P030sjFKyLaHRPGwDU3/TETRlZlR5f:kueQm1il8PWFKyLaHRPGyU3/TAlf

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:107769:lRQkGFagLjhEkwMMGAAAUjDgpEGlKEMKYQYTFA9VkEWVspQAOBhEsI2JQmKZJAgwoEgJGCYQBQhpRCKmRFVwgiMnWLAIIOhg

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:fcf4e4040000ffff
Perceptual Hash:d652ed6d989261ac
Difference Hash:08cccc0c2d000c06
Wavelet Hash:f8fce4040000ffff
Color Hash:#7995d2

Scan History

Scan history not available

Unable to load historical scan data