Site check
Is this website safe?
Type a website address. We look it up in today's malware reports, check how long the domain has existed and whether our editors have written about it.
What the check covers, and what it does not
- Malware reports
- Whether the address appears in URLhaus, a public list of sites caught distributing malware in recent weeks. A match is a strong warning.
- Domain age
- When the domain was registered, from the public registration record. Scam shops and phishing pages usually live on domains that are days or weeks old.
- Our removal guides
- Whether we have a guide about this address, for example for sites that push fake notifications or redirects.
No result is not a clean bill of health. The malware list does not cover phishing pages or fake shops, and new scams appear faster than any list. We do not use a multi-engine antivirus scanner. When in doubt, do not enter passwords or card details.
Recently reported websites
named hosts, last 7 daysSites reported for hosting malware. Addresses are written with [.] so they cannot be opened by accident. Many are legitimate sites that were hacked, or file-sharing services where one uploaded file was reported.
| Host | URLs | Online | Last report |
|---|---|---|---|
drive[.]google[.]comshared service, reports concern individual files | 4 | 2 | |
stanarcservice[.]comClickFix, ps1 | 3 | 2 | |
gitlab[.]comshared service, reports concern individual files | 656 | 645 | |
w5q[.]eucowrie, honeypot | 1 | 1 | |
media[.]discordapp[.]net | 1 | 0 | |
qwfwhg4[.]lolandroid, apk | 1 | 1 | |
www[.]mediafire[.]comshared service, reports concern individual files | 2 | 1 | |
cdn[.]discordapp[.]comshared service, reports concern individual files | 47 | 12 | |
donutclientsmods[.]xyzSilentNet | 11 | 0 | |
download1472[.]mediafire[.]comshared service, reports concern individual files | 1 | 0 | |
c23c1b-fa77-48e0-8272-692b579a574c[.]gorsefield[.]ccACR Stealer, ClearFake | 1 | 0 | |
sayosay[.]ccAppleScript, EtherHiding, macOS | 1 | 0 | |
bitbucket[.]orgshared service, reports concern individual files | 1 | 0 | |
ascomsecurity[.]com[.]aurat, RemcosRAT | 1 | 0 | |
www[.]epibenie[.]dzrat, RemcosRAT | 1 | 0 | |
rough-truth-e072[.]publicftpresend[.]workers[.]devpage hosted on workers.dev | 6 | 2 | |
flocmaterials[.]shopascii, mascii, MassLogger, opendir | 8 | 0 | |
aksiyononline[.]bestascii, js, MassLogger, opendir | 14 | 0 | |
trickgs-demo[.]vercel[.]apppage hosted on vercel.app | 4 | 0 | |
nd[.]tdpqnf[.]comAgentTesla, ascii, Encoded, opendir | 4 | 3 | |
raw[.]githubusercontent[.]comshared service, reports concern individual files | 12,918 | 12,872 | |
github[.]comshared service, reports concern individual files | 1,617 | 1,383 | |
cdn[.]filestackcontent[.]comClickFix, connectwise, exe | 1 | 1 | |
beschaffung-portal[.]deClickFix, DEU, exe, FileFix | 1 | 1 |
Latest individual reports
hxxp://130[.]12[.]180[.]212/x86_64online · Oct 9, 2026, 06:40 UTC · cowrie, honeypothxxp://109[.]236[.]46[.]199:59235/Mozi.monline · Oct 9, 2026, 06:40 UTChxxp://182[.]116[.]122[.]168:50444/bin.shonline · Oct 9, 2026, 06:17 UTChxxp://113[.]230[.]51[.]234:35025/ionline · Oct 9, 2026, 06:17 UTChxxps://drive[.]google[.]com/uc?export=download&id=1L_cku7GNkFeUfFiU2VEsvHDZJbSvzJMxonline · Oct 9, 2026, 06:14 UTC · GuLoader, rat, RemcosRAThxxps://drive[.]google[.]com/uc?export=download&id=14oEkhhftO_xx6X0Db-qpZwUl_arXfhIOonline · Oct 9, 2026, 06:10 UTC · GuLoader, rat, RemcosRAThxxp://stanarcservice[.]com/asset/update.datonline · Oct 9, 2026, 06:10 UTChxxps://stanarcservice[.]com:8443/payload/18d92fc0860cc33a.binoffline · Oct 9, 2026, 06:10 UTChxxp://115[.]58[.]177[.]21:40854/bin.shonline · Oct 9, 2026, 06:09 UTC · 32-bit, arm, elf, Mozihxxp://115[.]63[.]78[.]29:58952/bin.shoffline · Oct 9, 2026, 06:06 UTC · elfhxxp://219[.]157[.]242[.]174:60770/bin.shoffline · Oct 9, 2026, 06:06 UTC · elfhxxp://178[.]128[.]125[.]255/bins/mpsloffline · Oct 9, 2026, 06:06 UTC
Source: abuse.ch URLhaussource updated Oct 9, 2026, 06:40 UTC