file-iwl3.w-4mm9yl.workers.dev
172.67.180.236AS13335 · US- Content Inspectionsuspicious
- Browser Analysisclean
- Threat Intelligenceclean
- Network & Hostingclean
- Related Infrastructureclean
- TLS Fingerprintunknown
- Domain Intelligenceunknown
- Lexical Url Heuristicunknown
What happened
Step by step, from what the scanner recorded.Be careful — warning signs found
AutomatedThis site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.
What to do
Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.
"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.
Findings
Strongest firstOur Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.
Success
SHA-256 16d00811225660e5511b74d5dd39fab160ed8eb39b1dfc4e350ea189301f6919
Infrastructure
- IP
- 172.67.180.236CLOUDFLARENET - Cloudflare, Inc., US · AS13335US
- TLS
- CN=YE2, O=Let's Encrypt, C=US · expires Oct 23, 2026
Hashes & fingerprints
Page capture
LiveTitle “...”
Engines
8 · time to verdictPage
- HTTP
- 200 · Completed
- Title
- ...
- Load
- 14.84 s · 3 requests