Scan report · 11 days agoPublic

clmsa.my

207.56.119.44AS54801 · US
Landed onhttps://20260922.1666ee.com/?t8=· 1 redirect

behavioural signals scored 4 (threshold 4)

the individual signals are in the findings list
Verdict

Be careful — warning signs found

Automated

This site shows signs commonly seen in scams or impersonation, but we could not confirm it for certain. It may be a real threat, or it may be a legitimate site that simply looks unusual to our automated checks.

What to do

Avoid entering passwords or payment details until you are sure it is genuine. Open the company directly from its known website or app instead of this link. Check the evidence below and escalate to your analyst if unsure.

"Suspicious" is a caution, not a confirmation — it can be a false alarm. The evidence below explains why it was flagged.

Findings

Strongest first
Suspicious fileSuspicious content in the downloaded file
184f1034-dd8d-40ed-9db8-33e9a7204082.html

Our Content Inspection engine downloaded the file this URL serves and analyzed it. The payload shows traits commonly seen in malware. Treat it as unsafe until verified.

Success

SHA-256 773acdd0f805e118618cfbbebeb9667eeb04ff95cfe08ee7be42f06851d0bb13

SupportingDecoded-then-executed payload

Script on the page base64-decoded a blob and immediately ran it (decode → eval) — a classic way to hide an obfuscated payload from static inspection.

Analyst noteAlmost always obfuscation. Check the suspicious-script evidence panel for the decoded snippet.

Infrastructure

IP
207.56.119.44ZILLION-NETWORK - Zillion Network Inc., US · AS54801US
TLS
O=Default Company Ltd, L=Default City, C=XX · expires Aug 13, 2022
Redirects
1 hop · / → /?t8=

Hashes & fingerprints

Page capture

Live

Title “99影院”

Engines

7 · time to verdict

Page

HTTP
200 · Completed
Title
99影院
Load
10.05 s · 74 requests
Stack · 1Alibaba Cloud CDN