coderkubes.com
185.131.53.219AS146943 · INpage navigated to a document it built in memory (blob:) claiming Google, on non-legit host coderkubes.com; the payload never crossed the network
- Browser Analysissuspicious
- Content Inspectionclean
- Network & Hostingclean
- Threat Intelligenceclean
- Related Infrastructureclean
- TLS Fingerprintunknown
- Domain Intelligenceunknown
Be careful — warning signs found
AutomatedThis site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.
What to do
Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.
"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.
Findings
Strongest firstThe page assembled its next screen in memory and navigated to it as a blob: document. Nothing was fetched, so the page you would see never crossed the network — and it claims a brand this host does not own.
Analyst noteThere is no second URL to submit anywhere: a blob URL lives only in the tab that made it. Pivot on THIS host, on the script that builds the document, and on any external script it pulls into the blob — that host is usually the kit, and it is configuration, so expect it to rotate.
The page presents itself as a known brand (brand keywords/branding detected).
Analyst noteLow/medium confidence (keyword only) — can be a news article or partner page. Corroborate before acting.
Infrastructure
- IP
- 185.131.53.219TIER4CLOU-AS - Tier 4 Cloud Services, IN · AS146943IN
- TLS
- CN=YR2, O=Let's Encrypt, C=US · expires Oct 21, 2026
WHOIS
- Registrar
- Dreamscape Networks International Pte Ltd
- Created
- Feb 13, 2018
- Expires
- Feb 13, 2028
- Nameservers
- dns1.leapswitch.comdns2.leapswitch.comdns3.leapswitch.comdns4.leapswitch.com
Hashes & fingerprints
Page capture
LiveTitle “Sign in - Google Accounts” · brand shown: Google (low)
Engines
7 · time to verdictPage
- HTTP
- 200 · Completed
- Title
- Sign in - Google Accounts
- Load
- 12.31 s · 23 requests