Scan report · 2 months agoPublic

framerusercontent.com

143.204.238.101AS16509 · US
Engine tags
Verdict

Be careful — warning signs found

Automated

This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first
Suspicious fileSuspicious content in the downloaded file
f7347e10-6611-42a2-9c56-b7711bb47545.pdf

Our Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.

Success

SHA-256 ad3a8cce31141c7082238863ad17814a0480c8b6a2fe394a65b218bcf9b6707e

StrongPage auto-started a file download
lsRowzqgQmxPywo4uaHfUWSw.pdf

The page automatically triggered a file download. Normal landing pages don't do this; malware droppers do.

Analyst noteCheck the file name/type. An auto-download of an executable or archive is a strong malware-delivery tell.

File

Stored by the engine

What you download may be live malware. Open it only in an isolated environment, and do not double-click it.

The ZIP is encrypted. Password:infected

Inside the ZIP the file carries a name the engine generated, not the one the page used.

Downloaded fileSuspiciousThe engine stored it under a generated name

SHA-256ad3a8cce31141c7082238863ad17814a0480c8b6a2fe394a65b218bcf9b6707e

Fromhxxps://framerusercontent[.]com/assets/lsRowzqgQmxPywo4uaHfUWSw[.]pdf

Infrastructure

IP
143.204.238.101AMAZON-02 - Amazon.com, Inc., US · AS16509US
TLS
CN=Amazon RSA 2048 M01, O=Amazon, C=US · expires Nov 13, 2026
Redirects
0 hops · /assets/lsRowzqgQmxPywo4uaHfUWSw.pdf → blank

WHOIS

Registrar
CSC Corporate Domains, Inc.
Created
Apr 29, 2019
Expires
Apr 29, 2027
Nameservers
ns-1016.awsdns-63.netns-1156.awsdns-16.orgns-1960.awsdns-53.co.ukns-341.awsdns-42.com
12 malicious19 suspicious

Hashes & fingerprints

Page capture

Live

Engines

7 · time to verdict

Page

HTTP
— · DownloadOnly
Load
0.36 s · 1 requests