Scan report · about 1 month agoPublic

www.splunk.com

80.239.254.43AS1299 · SE

Submittedhttps://www.splunk.com/en_us/form/top-50-security-threats.html?utm_campaign=google_emea_HAM_en_search_generic_security&utm_source=google&utm_medium=cpc&utm_content=Top50Cybersecurity26_EB&utm_term=cybersecurity%20attacks&device=c&_bt=743898162125&_bm=p&_bn=g&gad_source=1&gad_campaignid=22403496206&gbraid=0AAAAAD8kDz1rzO-paFPO9o2cSUFAZtEso&gclid=EAIaIQobChMIheiwle_LlgMVpJCDBx0VORmZEAAYAyAAEgLybPD_BwE

Verdict

0 of 7 enginesCleanAutomated

Own this site?

Looks safe

Automated

Our automated checks did not find known threat signals on this site at the time of the scan.

What to do

No action needed. Stay alert as usual — a clean result reflects this scan only, and sites can change after they are checked.

A clean result means no known threat signals were found in this scan — it is not an absolute guarantee, and a site can change after it is checked.

Findings

Strongest first

InfoBrand impersonation detected

Meta · low

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteLow/medium confidence (keyword only) — can be a news article or partner page. Corroborate before acting.

InfoCross-domain scripts injected at runtime

19 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 80.239.254.43TWELVE99 - Arelion Sweden AB, SE · AS1299SE
TLS: CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US · expires Jan 8, 2027

WHOIS

Registrar: MarkMonitor Inc.
Created: Dec 7, 2001
Expires: Dec 7, 2026
Nameservers: ha1.markmonitor.zoneha2.markmonitor.zoneha3.markmonitor.zoneha4.markmonitor.zone

8 malicious1 suspicious

Hashes & fingerprints

Page Hash666c6b30747f5cea43d9bb5bb11d880e228766a03425b932e2f081344a77da48 Favicon Hash42f792a8e7f00849bb97837908ae22c1bf8b6a12c899108a3b8ebf98bbd798b8 DOM Hash1f3731e25d911f0d8faa2518d699b9fdd625261bc9d8b5a4637deecb03507d10 Screenshot pHashb91f16e00fe0b7e0 JARM28d28d28d00028d00042d42d000000e1ea2a807a629b496b664cf07ad7c08d JA4Xa373a9f83c6b_2bab15409345_2cdf432ec278 Cert ThumbprintCD7F6640774FA2E4CCD49CB2366F1AC8ADABD8B5 Cert IssuerCN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

Page capture

Live

Title “Top 50 Cybersecurity Threats | Splunk” · brand shown: Meta (low)

Visit Site

Engines

7 · time to verdict