Scan report · 2 months agoPublic

thecolorofcharacter.com

34.174.170.207AS396982 · US

Submittedhttps://thecolorofcharacter.com/

page reads command-and-control from a blockchain node while presenting no crypto context

Polygon.drpc.org, polygon-bor-rpc.publicnode.com, polygon.lava.build, polygon.rpc.subquery.network, polygon-public.nodies.app, polygon-pokt.nodies.app, polygon.gateway.tenderly.co, gateway.tenderly.co, rpc.ankr.com

Engine tags

EtherHiding

Verdict

2 of 7 enginesMaliciousAutomated

Own this site?

Dangerous — confirmed threat

Automated

Its page title claims to be Amazon, which this address is not associated with. It is listed on external threat-intelligence feeds. We found strong evidence that this site is malicious — for example a phishing page, a scam, or hostile code. Treat anything it asked for (passwords, card details, codes) as exposed.

What to do

Do not enter any information or download anything. If you already did, change those passwords now and contact your bank if payment details were involved. Block or report the link to your team.

This reflects the evidence found at the time of the scan. If you believe it is a mistake, you can escalate it for analyst review.

Findings

Strongest first

InfoBrand impersonation detected

Amazon · low

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteLow/medium confidence (keyword only) — can be a news article or partner page. Corroborate before acting.

InfoCross-domain scripts injected at runtime

2 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

File

The file was not analysed, so the scan carries no verdict on the file itself.

Infrastructure

IP: 34.174.170.207GOOGLE-CLOUD-PLATFORM - Google LLC, US · AS396982US
TLS: CN=YR2, O=Let's Encrypt, C=US · expires Oct 13, 2026

WHOIS

Registrar: GoDaddy.com, LLC
Created: Apr 22, 2015
Expires: Apr 22, 2027
Nameservers: ns1.us31.siteground.usns2.us31.siteground.us

27 malicious8 suspicious

Hashes & fingerprints

Page Hash7869dbe2507210bcb480a4a1752bd2be8b23aef521473ab06470421edcb39c94 Favicon Hash6bdb369337ac2496761c6f063bffea0aa6a91d4662279c399071a468251f51f0 DOM Hashf1cfb5498ff880573e82d2ed527a8d82ef03d9c61162fb5a76aee423f20dd05e Screenshot pHashf085699e6c65c3c3 JARM2ad2ad16d2ad2ad00042d42d000000df133019600a83abfb096ff3e86cd79d JA4Xa373a9f83c6b_7022c563de38_2e3757343cb0 Cert Thumbprint9A28EBFF65F7F91FAB3277EFD5ABEC412C3BE160 Cert IssuerCN=YR2, O=Let's Encrypt, C=US

Page capture

Live

Title “Home - The Color of Character” · brand shown: Amazon (low)

Visit Site

Engines

7 · time to verdict