Scan report · 2 months agoPublic

urlsand.esvalabs.com

194.164.145.241AS31034 · IT
Gated · Likely benign

An interaction gate (e.g. Cloudflare Turnstile) blocked full analysis — this verdict is based on pre-gate evidence.

GatedAssessment: likely-benign (score=6)

Verdict

Looks safe

Preliminary / could not fully load

Our automated checks did not find known threat signals on this site at the time of the scan.

What to do

No action needed. Stay alert as usual — a clean result reflects this scan only, and sites can change after they are checked.

A clean result means no known threat signals were found in this scan — it is not an absolute guarantee, and a site can change after it is checked.

Findings

Strongest first
InfoBlocked by a bot-protection gate
cloudflare

A bot-protection challenge (e.g. Cloudflare Turnstile) blocked full analysis, so the verdict relies on pre-gate evidence (see the Gated Risk Assessment).

Analyst noteThe gate alone is NOT suspicious — many legitimate sites use it. Read the Gated Risk Assessment for the actual pre-gate risk.

File

The file was not analysed, so the scan carries no verdict on the file itself.

Gated Risk Assessment

This page sits behind a bot-protection gate (e.g. Cloudflare Turnstile / CAPTCHA), so automated analysis could not fully complete. The assessment below uses only the evidence gathered BEFORE the gate. Pre-gate signals are weak (score 6, below the suspicious threshold) — likely benign.

Pre-gate risk score:6

Pre-gate signals

Cross-origin redirect before gateSupporting
+6

requested→final eTLD+1 differs

The link that was submitted ended on a different registered domain than where it started.

Legitimate when a brand redirects to its CDN or identity provider. Suspicious when a brand-looking link lands on an unrelated domain.

Path to gate (3 hops)

http3xxurlsand.esvalabs.com
https://urlsand.esvalabs.com/?u=https%3A%2F%2Ffiva9.com%2F&e=9e8f52eb&h=88786da9&f=y&p=y&m=4hF4TK5PmYzFyxf
http3xxfiva9.com
https://fiva9.com/
finalgtffvfrgqh.premierleaguefixures.com
https://gtffvfrgqh.premierleaguefixures.com/

Turnstile Sitekey

0x4AAAAAAEGhrMWsLTkdf5Eu

Infrastructure

IP
194.164.145.241ARUBA-ASN - Aruba S.p.A., IT · AS31034IT
TLS
CN=YE2, O=Let's Encrypt, C=US · expires Oct 31, 2026
Redirects
2 hops · /?u=https%3A%2F%2Ffiva9.com%…9&f=y&p=y&m=4hF4TK5PmYzFyxf → /

WHOIS

Registrar
Register SPA
Created
Jun 30, 2016
Expires
Jun 30, 2027
Nameservers
ns-1191.awsdns-20.orgns-1608.awsdns-09.co.ukns-187.awsdns-23.comns-817.awsdns-38.net

Hashes & fingerprints

Page capture

Live

Title “Please wait...”

Engines

8 · time to verdict

Page

HTTP
200 · AntiBotChallenged
Title
Please wait...
Load
31.80 s · 16 requests
Stack · 8BootstrapCloudflareCloudflare Browser InsightsHTTP/3jQueryjQuery CDN