Scan report · about 1 month agoPublic

www.kaspersky.com.tr

185.54.220.248AS200107 · CH

Submittedhttps://www.kaspersky.com.tr/blog/filefix-attack-windows-file-explorer/14081/

Verdict

0 of 7 enginesCleanAutomated

Own this site?

Looks safe

Automated

Our automated checks did not find known threat signals on this site at the time of the scan.

What to do

No action needed. Stay alert as usual — a clean result reflects this scan only, and sites can change after they are checked.

A clean result means no known threat signals were found in this scan — it is not an absolute guarantee, and a site can change after it is checked.

Findings

Strongest first

InfoCross-domain scripts injected at runtime

28 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP: 185.54.220.248KL-EXT - Kaspersky Lab Switzerland GmbH, CH · AS200107CH
TLS: CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US · expires Feb 19, 2027

1 suspicious

Hashes & fingerprints

Page Hashfaa35bf34dbb3975da546f32e918f556fd22635444ac3f50de0f9e47aae71076 Favicon Hash8bcf4b3de0b443735d274361dc3f5e5451ceebe38132fd1ce4f6e4124f3fa163 DOM Hash701e569a23af6b503d76d1ed63307c5f7f76bd70701a1746a8ff4744af1dba5e Screenshot pHash8f61f0dbf01cc01f JARM2ad2ad16d2ad2ad00042d42d00000072e74222ce193a6f991becaa3da6c94d JA4Xa373a9f83c6b_034f551d71a8_2cdf432ec278 Cert ThumbprintEECB9DD50419DC6CE6BBB5180F70A3B2CAC006F2 Cert IssuerCN=DigiCert Global G2 TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

Page capture

Live

Title “FileFix nedir? ClickFix’in bir varyasyonu mudur? | Kaspersky Resmi Blogu”

Visit Site

Engines

7 · time to verdict