Scan report · 2 months agoPublic

d585z804.na1.hubspotlinks.com

104.18.11.201AS13335 · US

Submittedhttps://d585z804.na1.hubspotlinks.com/Ctc/W5+113/d585z804/VWSZ225C7bZxW1qcjkr3mjGQcW6fpr4J5S0CzMN1YBnvv3m2nnW7lCdLW6lZ3k-W8958lc7F238BW7Mw1rZ5Ws4tNW7df4lH5MgKXfW5j3Wwn14vpL5VBTLVh4njMLlW60yCy89jX0YWW2LT9B53tjFnKW3J2sMZ1Hfd6tW8m6lZs26djh-W4wn1mc8sZMbWW3PKWGl5ncLvxW8gtjX01d2vq6W74Cd-K133tG0W4nG_G-6nnnHgW5mL3Rb5_bY_PW6V6PYy3jTtvyW3hMZnM701RdvN8Lj9NjNyvzQW1XrY7-1y0k_FVcc6zK3kpMSbVsYJ161Vf7yKW312Dc68-_jsQMFHwGjBWJ5kW87CZhm1SqfnTf5mdTJb04

Verdict

0 of 7 enginesCleanAutomated

Own this site?

Looks safe

Automated

Our automated checks did not find known threat signals on this site at the time of the scan.

What to do

No action needed. Stay alert as usual — a clean result reflects this scan only, and sites can change after they are checked.

A clean result means no known threat signals were found in this scan — it is not an absolute guarantee, and a site can change after it is checked.

Findings

Strongest first

InfoBrand impersonation detected

Meta · low

The page presents itself as a known brand (brand keywords/branding detected).

Analyst noteLow/medium confidence (keyword only) — can be a news article or partner page. Corroborate before acting.

InfoCross-domain scripts injected at runtime

7 script(s)

The page dynamically injected scripts from other domains. This is extremely common on legitimate sites (CDNs, analytics, asset domains) and is shown for context only.

Analyst noteNoisy by itself — a CDN/asset domain (e.g. a brand's own *.githubassets.com) is normal. Only meaningful if the source domain is unrelated/suspicious.

File

Stored by the engine

What you download may be live malware. Open it only in an isolated environment, and do not double-click it.

The ZIP is encrypted. Password:infected

Inside the ZIP the file carries a name the engine generated, not the one the page used.

Downloaded fileCleanThe engine stored it under a generated name

SHA-256b9d19842b07e5079715497bade2f3a2ab3aa051edb58b9bbee3d4af1a3df7265

Infrastructure

IP: 104.18.11.201CLOUDFLARENET - Cloudflare, Inc., US · AS13335US
TLS: CN=WE1, O=Google Trust Services, C=US · expires Oct 21, 2026

WHOIS

Registrar: MarkMonitor Inc.
Created: May 26, 2021
Expires: May 26, 2027
Nameservers: adi.ns.cloudflare.comjerome.ns.cloudflare.com

4 malicious5 suspicious

Hashes & fingerprints

Page Hash60da8f3b471f17df3b37ad9252cee7c3a1f2d7d1cf04093038a528efa39f2545 DOM Hash46219a4cbc9a4904bee1a4759068fdadc50aae90d43f2e58e588b3bda9f35d5d Screenshot pHashd555aaaaaaa8aaaa JARM27d40d40d00040d1dc42d43d00041d6183ff1bfae51ebd88d70384363d525c JA4Xa373a9f83c6b_7022c563de38_2e3757343cb0 Cert Thumbprint3A5AADB075E4934B322D6F8E3620068A9FB39915 Cert IssuerCN=WE1, O=Google Trust Services, C=US

Page capture

Live

Title “Become a Sponsor – CYSEC MENA 2026” · brand shown: Meta (low)

Visit Site

Engines

7 · time to verdict