What Gridinsoft observed on cswenergy.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260929210745-9205b3d1
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Safe
- Evidence basis
- First-party site analysis External vendor intelligence: Contradictory context — not used for this decision
Remove the unsupported current broad detection for cswenergy.com and its www alias. The reviewed public pages and scripts present ordinary business functionality without reproduced harmful behavior.
Analyst findings
Review 4 documented observations View evidence
The apex returned HTTP 200 and www redirected to it. Home, About, Advisory, Engagements and Contact presented clean-energy consulting services. Browser navigation and reviewed Framer scripts did not reproduce phishing, malicious downloads or unrelated automatic redirects. The custom-snippet module was empty.
- Public artifact URL https://cswenergy.com/
- Public artifact URL https://www.cswenergy.com/
- Public artifact URL https://cswenergy.com/about
- Public artifact URL https://cswenergy.com/advisory
- Public artifact URL https://cswenergy.com/engagements
The contact form requests ordinary inquiry details, not passwords or payment credentials; its component uses api.framer.com for submission. No form was submitted. The linked privacy-policy page returned HTTP 404; this broken link is not evidence of malware.
- Public artifact URL https://cswenergy.com/contact
- Public artifact URL https://cswenergy.com/privacy-policy/
The Wayback snapshot dated 2026-04-22 shows the earlier solar-services site. Four urlscan root observations span 2026-08-14 to 2026-09-06: August entries used DreamHost, while September used Framer. Municipal RFP documents also reference the domain. This supports continuity of business use, not universal security.
- Public artifact URL https://web.archive.org/web/20260422143938/https://cswenergy.com/
- Public artifact URL https://urlscan.io/result/01a0763f-8bb1-734b-91a3-c43bca780ec2/
- Public artifact URL https://www.northstoningtonct.gov/sites/g/files/vyhlif4806/f/uploads/joint_rfp.pdf
Exact-host and parent-domain searches found historical community IOC context, including the public ThreatFix pulse and an indexed SOCRadar ThreatFox compilation dated 2026-08-15. OTX returned zero associated malware samples and zero www pulses; urlscan returned zero www page-domain results. Existing report warnings from ADMINUSLabs, CRDF, Fortinet, MalwareURL, SOCRadar and alphaMountain.ai use method blacklist. No linked payload or harmful execution trace was independently verified.
- Public artifact URL https://otx.alienvault.com/pulse/6a88005d764e0d972021269b
- Public artifact URL https://socradar.io/free-tools/ioc-radar/reports/abuse-ch-threatfox-5537-indicators-b0e49e96ec32
- Public artifact URL https://www.virustotal.com/gui/domain/cswenergy.com
Scope and limitations
- No forms were submitted, authenticated areas accessed or server-side code audited. Hidden paths and future changes are outside this review.
- Detailed urlscan results returned HTTP 403; ThreatFox required browser verification and direct SOCRadar access failed. Its indexed listing is context, not a verified original sample.
- VirusTotal-linked warnings came from the existing report, not a fresh scan. Scamadviser was excluded from the decision. Negative search results do not prove absence.
Help protect others by sharing this page on social media! The more people who know about cswenergy.com, the fewer chances they have to deceive someone else. Help others evaluate cswenergy.com by sharing this page on social media!