Scan report · about 1 month agoPublic

www.figma.com

3.164.230.74AS16509 · US
Verdict

Be careful — warning signs found

Automated

It asks you to enter a password. This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first
Suspicious fileSuspicious content in the downloaded file
cc7da882-3f3a-4efc-9791-ed16ae7684e1.html

Our Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.

Success

SHA-256 ea040884909e07e2d9ed91cf0959929431340641a012d70eca74f3ded899ad32

InfoBrand impersonation detected
Google · low

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteLow/medium confidence (keyword only) — can be a news article or partner page. Corroborate before acting.

Infrastructure

IP
3.164.230.74AMAZON-02 - Amazon.com, Inc., US · AS16509US
TLS
CN=Amazon RSA 2048 M04, O=Amazon, C=US · expires Feb 3, 2027

WHOIS

Registrar
Amazon Registrar, Inc.
Created
Apr 10, 1999
Expires
Apr 10, 2027
Nameservers
ns-1239.awsdns-26.orgns-1657.awsdns-15.co.ukns-326.awsdns-40.comns-912.awsdns-50.net
1 malicious29 suspicious

Hashes & fingerprints

Page capture

Live

Title “Login | Figma” · brand shown: Google (low)

Engines

7 · time to verdict

Page

HTTP
200 · Completed
Title
Login | Figma
Load
1.91 s · 33 requests
Stack · 7Amazon ALBAmazon CloudFrontAmazon S3HSTSHTTP/3Open Graph