VerdictMalicious

Dangerous — confirmed threat

Automated

We found strong evidence that this site is malicious — for example a phishing page, a scam, or hostile code. Treat anything it asked for (passwords, card details, codes) as exposed.

What to do

Do not enter any information or download anything. If you already did, change those passwords now and contact your bank if payment details were involved. Block or report the link to your team.

This reflects the evidence found at the time of the scan. If you believe it is a mistake, you can escalate it for analyst review.

What We Found

MalwareMalware found in the downloaded file

goodthingsforme.hta

Our Content Inspection engine downloaded the file this URL serves and analyzed it as a real payload — it matched known malware. Do not open or run this file.

Success

SHA-256 e52af1bb74ee3f0368ec1779791328961c86c18b73e15c3ab28b422d7cbe1b14

StrongPage auto-started a file download

goodthingsforme.hta

The page automatically triggered a file download. Normal landing pages don't do this; malware droppers do.

Check the file name/type. An auto-download of an executable or archive is a strong malware-delivery tell.

HTTP Status

DownloadOnly

Page Title

Load Time

0.67s

HTTP Requests

2

Domain & Network

IP Address:192.227.219.92AS-COLOCROSSING - HostPapa, US (AS36352)US
Redirects:0 hopshttp://00030070755534/aHR0cDovLzE5Mi4yMjcuMjE5LjkyLzM1L2NjZS9nb29kdGhpbmdzZm9ybWUuaHRh.phpabout:blank
2 malicious2 suspicious

Engine Verdicts

Screenshot

Live