Scan report · 21 days agoPublic

cdn.jsdelivr.net

151.101.193.229AS54113 · US
Landed onabout:blank

behavioural signals scored 4 (threshold 4)

all of it from handing over a file rather than rendering a page; see the findings list
Engine tags
Verdict

Be careful — warning signs found

Automated

This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first
StrongPage auto-started a file download
78-2106B1-D6C1

The page automatically triggered a file download. Normal landing pages don't do this; malware droppers do.

Analyst noteCheck the file name/type. An auto-download of an executable or archive is a strong malware-delivery tell.

File

This file type is not analysed, so the scan carries no verdict on the file itself.

Infrastructure

IP
151.101.193.229FASTLY - Fastly, Inc., US · AS54113US
TLS
CN=GlobalSign Atlas R3 DV TLS CA 2026 Q2, O=GlobalSign nv-sa, C=BE · expires Dec 5, 2026
Redirects
0 hops · /gh/48-689100-172-171440/708C-BB-236A/78-2106B1-D6C1 → blank

WHOIS

Registrar
Amazon Registrar, Inc.
Created
May 16, 2012
Expires
May 16, 2027
Nameservers
dns1.p08.nsone.netgns1.cloudns.netgns2.cloudns.netns1.gcorelabs.netns2.gcdn.services
19 malicious15 suspicious

Hashes & fingerprints

Page capture

Live

Engines

7 · time to verdict

Page

HTTP
— · DownloadOnly
Load
0.07 s · 1 requests