Scan report · about 1 month agoPublic

54.197.245.249

54.197.245.249AS14618 · US

page reads command-and-control from a blockchain node while presenting no crypto context (polygon.drpc.org)

Engine tags
EtherHiding
Verdict

Dangerous — confirmed threat

Automated

We found strong evidence that this site is malicious — for example a phishing page, a scam, or hostile code. Treat anything it asked for (passwords, card details, codes) as exposed.

What to do

Do not enter any information or download anything. If you already did, change those passwords now and contact your bank if payment details were involved. Block or report the link to your team.

This reflects the evidence found at the time of the scan. If you believe it is a mistake, you can escalate it for analyst review.

Findings

Strongest first
Suspicious fileSuspicious content in the downloaded file
1d7b8019-b72e-483f-90e7-e64dce6b6053.html

Our Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.

Success

SHA-256 eb7a010990ef1dd2d748724048dd398a35467aae962a2cf3116b153c076f0b92

InfoCross-domain scripts injected at runtime
2 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

Infrastructure

IP
54.197.245.249AMAZON-AES - Amazon.com, Inc., US · AS14618US
Redirects
0 hops · / → /
14 malicious14 suspicious

Hashes & fingerprints

Page capture

Live

Title “Casa Ananda | Cabañas”

Engines

8 · time to verdict

Page

HTTP
200 · Completed
Title
Casa Ananda | Cabañas
Load
15.02 s · 17 requests
Stack · 7Apache HTTP ServerFitVids.JSjQueryjQuery MigrateWordPressPHP