Scan report · 3 months agoPublic

politicsinsights.com

199.188.200.200AS22612 · US

Submittedhttps://politicsinsights.com

Landed onhttps://politicsinsights.com/

Verdict

1 of 7 enginesSuspiciousAutomated

Own this site?

Be careful — warning signs found

Automated

This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first

Suspicious fileSuspicious content in the downloaded file

3471282a-3215-4481-b62c-a23f41a66be3.com

Our Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.

Success

SHA-256 dec0522ddb27ea357bcdccceee1804c643638d36cd01918c8ba526f719a9b824

InfoCross-domain scripts injected at runtime

1 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

File

Stored by the engine

What you download may be live malware. Open it only in an isolated environment, and do not double-click it.

The ZIP is encrypted. Password:infected

Inside the ZIP the file carries a name the engine generated, not the one the page used.

Downloaded fileSuspiciousThe engine stored it under a generated name

SHA-256dec0522ddb27ea357bcdccceee1804c643638d36cd01918c8ba526f719a9b824

Infrastructure

IP: 199.188.200.200NAMECHEAP-NET - Namecheap, Inc., US · AS22612US
TLS: CN=Sectigo Public Server Authentication CA DV R36, O=Sectigo Limited, C=GB · expires Nov 5, 2026
Redirects: 0 hops · / → /

WHOIS

Registrar: NameCheap, Inc.
Created: Nov 5, 2025
Expires: Nov 5, 2026
Nameservers: dns1.namecheaphosting.comdns2.namecheaphosting.com

9 malicious

Hashes & fingerprints

Page Hash7fedf585e8ec9e702f574f233915990a54290ec5be7ff13ed725d4759788da36 Favicon Hash1589a40dd3726c99836cbda467873512cc268da0db65aaae795f92b1a592468e DOM Hash34aead1ad9209582cefdb3cb240c09119cdf6e8152c7a1ea95773be79470a7b1 Screenshot pHashfb7785b085c885b2 JARM3fd3fd15d3fd3fd00042d42d000000038eaaf490bec8dc33757f165ce01762 JA4Xa373a9f83c6b_7022c563de38_0321e8b32200 Cert ThumbprintBC115791972FE3AB56C1A9BC614B9D7DC9EF0C69 Cert IssuerCN=Sectigo Public Server Authentication CA DV R36, O=Sectigo Limited, C=GB

Page capture

Live

Title “Home - Politics Insights | See Beyond the Headlines”

Visit Site

Engines

7 · time to verdict