ik.imagekit.io
143.204.238.33AS16509 · USbehavioural signals scored 4 (threshold 4)
- Browser Analysissuspicious
- Network & Hostingclean
- Threat Intelligenceclean
- Related Infrastructureclean
- Content Inspectionunknown
- Domain Intelligenceunknown
- TLS Fingerprintunknown
Be careful — warning signs found
AutomatedThis site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.
What to do
Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.
"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.
Findings
Strongest firstThe page automatically triggered a file download. Normal landing pages don't do this; malware droppers do.
Analyst noteCheck the file name/type. An auto-download of an executable or archive is a strong malware-delivery tell.
File
The file was not analysed, so the scan carries no verdict on the file itself.
Infrastructure
- IP
- 143.204.238.33AMAZON-02 - Amazon.com, Inc., US · AS16509US
- TLS
- CN=Amazon RSA 2048 M01, O=Amazon, C=US · expires Dec 20, 2026
- Redirects
- 0 hops · /r017t0www/DOCUMENTO%20CITAC…DICIAL%20RAD20260819pdf.zip → blank
WHOIS
- Registrar
- GoDaddy.com, LLC
- Organization
- Domains By Proxy, LLC
- Country
- US
- Created
- Jan 17, 2016
- Expires
- Jan 17, 2031
- Nameservers
- ns-1925.awsdns-48.co.ukns-876.awsdns-45.netns-1393.awsdns-46.orgns-241.awsdns-30.com