Scan report · about 1 month agoPublic

docs.docker.com

108.157.229.96AS16509 · US

Submittedhttps://docs.docker.com/desktop/setup/install/windows-install/

Verdict

1 of 7 enginesSuspiciousAutomated

Be careful — warning signs found

Automated

This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first

Suspicious fileSuspicious content in the downloaded file

f86d3011-7c57-4816-9d37-e2d0440677c4.html

Our Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.

Success

SHA-256 cbbb7cbf1e6dae99cc6266a1458627ff7a2e26af1256019187860af4df3ae208

InfoBrand impersonation detected

Microsoft · low

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteLow/medium confidence (keyword only) — can be a news article or partner page. Corroborate before acting.

InfoCross-domain scripts injected at runtime

5 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 108.157.229.96AMAZON-02 - Amazon.com, Inc., US · AS16509US
TLS: CN=Amazon RSA 2048 M04, O=Amazon, C=US · expires Jan 2, 2027

WHOIS

Registrar: Gandi SAS
Created: Jan 25, 1995
Expires: Jan 26, 2027
Nameservers: ns-1289.awsdns-33.orgns-1981.awsdns-55.co.ukns-207.awsdns-25.comns-568.awsdns-07.net

16 suspicious

Hashes & fingerprints

Page Hasha424868f4a41901a8373ff30974fae5fc63fce2cb4f0282c24d1147e9756641c Favicon Hasha9e08fe48c361085d3348efdd81d5ac5830a8695aead9b616df96af88dddaac7 DOM Hash2b2978c1deccb7bd308be7afeaf6b664f2733261a4edeadd609131d9bcefbbe4 Screenshot pHash806895ff7d017a0f JARM29d29d00029d29d00041d41d00041db78309d03c04b7072bacbf1ce396279b JA4Xa373a9f83c6b_7022c563de38_2cdf432ec278 Cert ThumbprintA10D5BC8A595287419B31189F50D4DAC95E7A151 Cert IssuerCN=Amazon RSA 2048 M04, O=Amazon, C=US

Page capture

Live

Title “Install Docker Desktop on Windows | Docker Docs” · brand shown: Microsoft (low)

Visit Site

Engines

7 · time to verdict