Scan · bot.pwn-all.com

76mostly okay

mostly okay92% confidence · well covered100% clean (55/55 engines)

bot.pwn-all.com

The site uses HTTPS, has a privacy policy. Overall score 76/100 (mostly okay). Notable concerns: Domain is very new (registered 82 days ago).

+20

Technical

Legal

Stability

-1

Suspicious

Scan details

Submitted URL

https://bot.pwn-all.com

Normalized URL

https://bot.pwn-all.com/

Final destination

https://bot.pwn-all.com/

HTTP status

200

Scan date

2026-07-21 23:58 UTC

Status

completed

Final response hash

2b27df00214f485b98160cca1e8ee5f32bb15d993d9e151682cdf56c5e7cfc7b

Rendered HTML hash

2b27df00214f485b98160cca1e8ee5f32bb15d993d9e151682cdf56c5e7cfc7b

Scan history for this URL

No earlier scans of this exact URL. This is the first time it has been checked here.

Signals

Positive signals

Final destination uses HTTPS.
HSTS header present.
Content-Security-Policy present.
VirusTotal: no engines flagged this domain.
Google Safe Browsing: no threats found.
Domain registered several years in advance.
Domain publishes email-authentication records (DMARC / SPF).

Negative signals

Domain is very new (registered 82 days ago).

Neutral / informational

Privacy-policy link present on page (claimed, not verified).
No company / legal-entity text detected (informational).

Brand impersonation

No brand impersonation detected

No known brands referenced.

Content risk (scam heuristics)

No scam-pattern content detected

None of the known fraud-language archetypes (fund recovery, fake investment, high-pressure, impersonation) matched.

Screenshot

Captured 2026-07-21 23:58:33 UTC

Redirect history

No redirects observed.

Network requests

8 requests across 1 host — 0 POST/PUT, 8 GET/other.

Other requests (8) — GET: JS / image / XHR / fetch / …

Method	Status	Type	URL
GET	200	Document	https://bot.pwn-all.com/
GET	200	Image	https://bot.pwn-all.com/logo.svg
GET	200	Image	https://bot.pwn-all.com/h/081cbbb94cdb04a61c50f66ad986f192/1.bmp
GET	200	Image	https://bot.pwn-all.com/h/081cbbb94cdb04a61c50f66ad986f192/2.bmp
GET	200	Image	https://bot.pwn-all.com/h/081cbbb94cdb04a61c50f66ad986f192/3.bmp
GET	200	Image	https://bot.pwn-all.com/h/081cbbb94cdb04a61c50f66ad986f192/4.bmp
GET	200	Image	https://bot.pwn-all.com/h/081cbbb94cdb04a61c50f66ad986f192/5.bmp
GET	—	Script	https://bot.pwn-all.com/products/botguard-probe.js?v=34

Detected technologies

No technologies detected.

Server / security headers

content-security-policy	default-src 'self'; script-src 'self'; connect-src 'self' https://bot.pwn-all.com:8443 wss://bot.pwn-all.com; img-src 'self' data:; style-src 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self';
content-type	text/html; charset=utf-8
strict-transport-security	max-age=63072000; includeSubDomains; preload

Privacy & legal identity

No legal entity information found.

External reputation

Clean rate	100% — 55/55 engines rated this harmless
Domain age	82 days (very new ⚠) — registered 2026-04-30T18:36:45Z
Registrar	GoDaddy.com, LLC
Registration expires	in 3570 days (registered well ahead ✓)
WHOIS	registrant details public
Hosting IP	`82.112.236.13` · Mumbai, India
Network (ASN)	AS47583 — Hostinger International Limited
Popularity	not in Tranco top list (informational)
Email auth (DNS)	MX ✓ · SPF ✓ · DMARC ✓ · configured domain (trust +)
TLS certificate	valid — issued by Let's Encrypt, expires in 49 days · DV
OpenPhish	not listed
URLhaus	not listed
VirusTotal	malicious 0, suspicious 0, harmless 55, undetected 36 · reputation 0
Google Safe Browsing	no threats found

Rendering engine

Engine	OK	Status	Final URL	Body hash	Error
chrome	✅	200	https://bot.pwn-all.com/	`2b27df00214f485b…`	—

Page content

Plaintext HTML (9603 bytes)

<!DOCTYPE html><html lang="en"><head>
<meta charset="utf-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Connection check</title>
<meta name="description" content="Real-time bot/VPN/proxy risk score from passive network, TLS and behavioral signals — no tracking, no block-lists.">
<meta name="robots" content="index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1">
<link rel="icon" href="/logo.svg">
<style>
  :root{
    --bg:#070b12; --bgglow:#0f1d2e; --panel:#0d141f; --panel2:#111b29;
    --line:#1d2c40;
    --ink:#e7eef8; --mut:#7d92ab; --acc:#39d3ff; --good:#21c07a; --warn:#e3b341; --bad:#e5534b;
    --dot-idle:#1b2c42;
    --mono:ui-monospace,"SF Mono",Menlo,Consolas,monospace; --sans:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;
    color-scheme:dark;
  }
  /* Auto theme: follow the operating-system preference (no manual switch). */
  @media (prefers-color-scheme: light){
    :root{
      --bg:#eef3fa; --bgglow:#dfeaf8; --panel:#ffffff; --panel2:#f3f7fc;
      --line:#d4dded;
      --ink:#0e1b2b; --mut:#566b82; --acc:#0a7ea4; --good:#1a8f5a; --warn:#a9760f; --bad:#c0392b;
      --dot-idle:#c7d4e6;
      color-scheme:light;
    }
  }
  *{box-sizing:border-box}
  html,body{margin:0}
  body{background:radial-gradient(1100px 720px at 50% -8%,var(--bgglow) 0%,var(--bg) 62%);
    color:var(--ink);font-family:var(--sans);min-height:100vh;line-height:1.55}
  .wrap{max-width:760px;margin:0 auto;padding:26px 18px 64px;display:flex;flex-direction:column;align-items:center}

  /* ---- header ---- */
  .headrow{display:flex;align-items:center;gap:11px;width:100%;margin:2px 0 8px}
  .brandbar{display:flex;align-items:center;gap:11px;text-decoration:none;width:max-content}
  .brandbar img{height:26px;width:auto;max-width:150px;display:block;background:#0a1119;
    padding:5px 8px;border-radius:9px;filter:drop-shadow(0 2px 6px rgba(200,0,31,.3))}
  .brandbar .wm{display:flex;flex-direction:column;line-height:1.05}
  .brandbar .wm b{font-size:15px;letter-spacing:2px;color:var(--ink);font-weight:700}
  .brandbar .wm span{font-size:10px;letter-spacing:1.5px;color:var(--mut);text-transform:uppercase}

  /* ---- hero: the PWN dot-logo verdict ---- */
  .hero{display:flex;flex-direction:column;align-items:center;width:100%;padding:30px 0 6px;text-align:center}
  #cg-logo{display:block;width:min(480px,88vw);aspect-ratio:834/470;height:auto;image-rendering:auto}

  /* device / location summary line */
  .summary{margin:20px 0 4px;font-size:clamp(15px,4.4vw,20px);font-weight:600;letter-spacing:.2px;
    min-height:1.4em;transition:color .4s ease}
  .summary .seg{transition:color .4s ease}
  .summary.scan{color:var(--mut);font-weight:500}
  .summary .lead{color:var(--mut);font-weight:500}
  .summary .seg.ok{color:var(--ink)}
  /* colour + a non-colour cue (wavy underline) so severity isn't colour-only */
  .summary .seg.warn{color:var(--warn);text-decoration:underline wavy var(--warn);text-underline-offset:4px}
  .summary .seg.bad{color:var(--bad);text-decoration:underline wavy var(--bad);text-underline-offset:4px}

  /* main findings — the short "why" behind the coloured dots */
  .findings{margin:14px 0 2px;width:100%;max-width:440px;display:flex;flex-direction:column;gap:7px}
  .find{display:flex;align-items:flex-start;gap:9px;font-size:13px;text-align:left;color:var(--ink);
    background:linear-gradient(180deg,var(--panel),var(--panel2));border:1px solid var(--line);
    border-left-width:3px;border-radius:0 9px 9px 0;padding:8px 11px;line-height:1.4}
  .find .fdot{flex:none;width:8px;height:8px;border-radius:50%;margin-top:5px}
  .find.crit{border-left-color:var(--bad)} .find.crit .fdot{background:var(--bad)}
  .find.warn{border-left-color:var(--warn)} .find.warn .fdot{background:var(--warn)}
  .find.more{justify-content:center;color:var(--mut);font-size:12px;background:none;border:0;padding:2px}

  /* three site-sensitivity risk tiers */
  .tiers{margin-top:22px;display:flex;flex-wrap:wrap;gap:14px 10px;align-items:stretch;justify-content:center;width:100%}
  .tiers .lead{width:100%;color:var(--mut);font-size:11px;letter-spacing:1.6px;text-transform:uppercase;margin-bottom:2px}
  .tier{flex:1 1 130px;max-width:200px;background:linear-gradient(180deg,var(--panel),var(--panel2));
    border:1px solid var(--line);border-radius:14px;padding:14px 10px 12px;display:flex;flex-direction:column;gap:6px}
  .tier .tl{color:var(--mut);font-size:11px;letter-spacing:.8px;text-transform:uppercase}
  .tier b{font-family:var(--mono);font-size:34px;font-weight:700;line-height:1;color:var(--mut);transition:color .5s ease}
  .tier b .pct{font-size:16px;font-weight:600;opacity:.65;margin-left:1px}

  /* raw latency readout (public) */
  .rtts{margin-top:18px;font-family:var(--mono);font-size:12px;color:var(--mut);letter-spacing:.3px;
    text-align:center;line-height:1.7}
  .rtts .rk{text-transform:uppercase;font-size:10px;letter-spacing:1px}
  .rtts b{color:var(--ink);font-weight:600}
  .rtts .sep{opacity:.4;margin:0 3px}

  footer{color:var(--mut);font-size:12px;margin-top:34px;text-align:center}
  footer a{color:var(--mut)}

  /* honeypot decoys — rendered (so a real browser fetches + decodes them) but
     kept out of sight; their load pattern feeds the passive asset-honeypot check. */
  .vh{position:absolute;left:-9999px;top:0;width:8px;height:8px;opacity:0;pointer-events:none}

  /* privacy banner (unchanged behaviour) */
  .privacy-banner{position:fixed;left:0;right:0;bottom:0;z-index:40;background:#0b1220;border-top:1px solid #22384f;
    color:#c7d6e8;padding:13px 44px 13px 16px;font-size:12.5px;display:flex;gap:11px;align-items:flex-start;line-height:1.5}
  /* The class sets display:flex, which outranks the [hidden] UA rule; make hidden win so the banner can close. */
  .privacy-banner[hidden]{display:none}
  .privacy-banner .pb-ico{font-size:16px}
  .privacy-banner .pb-text a{color:#56c7ff;font-weight:600}
  .privacy-banner .pb-x{position:absolute;top:7px;right:9px;cursor:pointer;border:0;background:transparent;
    color:#8aa0b8;font-size:21px;line-height:1;padding:3px 8px;border-radius:8px}
  .privacy-banner .pb-x:hover{color:#fff;background:rgba(255,255,255,.12)}
</style>
<link rel="dns-prefetch" href="//081cbbb94cdb04a61c50f66ad986f192.dns.bot.pwn-all.com"><link rel="preconnect" href="//081cbbb94cdb04a61c50f66ad986f192.dns.bot.pwn-all.com">
</head>
<body>
  <div class="wrap">
    <div class="headrow">
      <a class="brandbar" href="https://pwn-all.com/" rel="noopener">
        <img src="/logo.svg" alt="PWN-ALL">
        <span class="wm"><b>PWN-ALL</b><span>bot &amp; abuse detection</span></span>
      </a>
    </div>

    <main class="hero">
      <!-- The verdict IS the logo: PWN drawn in dots. Each finding lights a few
           dots — orange for a soft signal, red for a spoof/automation tell. -->
      <canvas id="cg-logo" role="img" aria-label="PWN connection verdict">PWN</canvas>

      <!-- Who you look like, and from where — coloured per segment: red if a value
           looks faked/spoofed, orange for a softer inconsistency. -->
      <div class="summary scan" id="cg-summary" role="status" aria-live="polite">analysing your connection…</div>

      <!-- The main findings behind the coloured dots (top few, worst first). -->
      <div class="findings" id="cg-findings" aria-live="polite" hidden=""></div>

      <!-- The same visitor is a different risk to different kinds of site. -->
      <div class="tiers" id="cg-tiers">
        <span class="lead">bot score for</span>
        <span class="tier"><span class="tl">usual sites</span><b id="tier-usual">·</b></span>
        <span class="tier"><span class="tl">government</span><b id="tier-gov">·</b></span>
        <span class="tier"><span class="tl">financial</span><b id="tier-fin">·</b></span>
      </div>

      <!-- Raw latency readout: the RTT measurements that feed proxy/relay detection. -->
      <div class="rtts" id="cg-rtts" aria-live="polite" hidden=""></div>
    </main>

    <div class="vh" id="cg-assets" aria-hidden="true">
      <img alt="" src="/h/081cbbb94cdb04a61c50f66ad986f192/1.bmp">
      <img alt="" src="/h/081cbbb94cdb04a61c50f66ad986f192/2.bmp">
      <img alt="" src="/h/081cbbb94cdb04a61c50f66ad986f192/3.bmp">
      <img alt="" src="/h/081cbbb94cdb04a61c50f66ad986f192/4.bmp">
      <img alt="" src="/h/081cbbb94cdb04a61c50f66ad986f192/5.bmp">
    </div>

    <footer>
      Live trust score, 0 (clean) → 100 (automated) · no tracking, no block-lists. <a href="/privacy.html">Privacy Policy</a> · <a href="/terms.html">Terms</a>
    </footer>
  </div>

  <!-- Privacy notice. Shown until acknowledged (remembered in localStorage); the
       version makes it reappear whenever the policy is updated. -->
  <div class="privacy-banner" id="cg-privacy" data-ver="2026-07-13" hidden="">
    <span class="pb-ico">🔒</span>
    <span class="pb-text">
      This scanner analyzes connection and in-browser security signals to score bot/VPN risk, as described in our
      <a href="/privacy.html">Privacy Policy</a>. Raw browser measurements are not persisted; short HMAC-derived
      comparison buckets may remain in memory for up to <b>15&nbsp;minutes</b>.
    </span>
    <button type="button" class="pb-x" id="cg-privacy-ok" aria-label="Dismiss">×</button>
  </div>

  <noscript><p class="summary scan">JavaScript is disabled. The passive server-side verdict still applies; browser-only checks were not collected.</p></noscript>
  <script src="/products/botguard-probe.js?v=34" defer=""></script>


</body></html>

Full history for pwn-all.com → · View raw JSON · How we score · ← Back home