Is copypasteamt.ch safe?

No. MalwareAnalyzer scanned copypasteamt.ch on 21 Aug 2026 and returned a malicious verdict with a score of 60 out of 100, categorised as phishing and credential-harvest. Treat it as hostile until it is re-checked.

How was copypasteamt.ch checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

copypasteamt.ch - malicious URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned copypasteamt.ch and returned a malicious verdict (score 60), categorised as phishing, credential-harvest. The page resolved to 31.43.161.6 on Framer B.V. in NL. 8 domains and 6 IPs were contacted, over 34 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 60) · Confidence 69%
Scanned URL: https://copypasteamt.ch/
Domain: copypasteamt.ch · IP: 31.43.161.6 · AS16509 · NL
Server: Framer/6443c08
Page title: Copy Paste Amt | Home
HTTP status: 200 · text/html
TLS issuer: C=US, O=Let's Encrypt, CN=YE1 · valid to Nov 1 01: · subject CN=copypasteamt.ch
HTTP requests captured: 34 · outgoing links: 22
Scan tier: standard · observed 2026-08-21 05:46:09 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Domain impersonates steam (combosquat)
Runtime data beacon to events.framer.com
Credential-harvesting form

Contacted infrastructure

31.43.161.6 - AS16509 Framer B.V. (Netherlands)
31.43.160.6 - AS16509 Framer B.V. (Netherlands)

Observed indicators

copypasteamt.ch
framer.com
framerusercontent.com
fonts.gstatic.com
events.framer.com
www.instagram.com
app.framerstatic.com
api.framer.com
31.43.161.6
31.43.160.6
3.175.115.93
18.67.110.116
18.65.244.70
3.175.115.78
https://copypasteamt.ch/
https://framer.com/edit/init.mjs
https://framerusercontent.com/images/iAlP0d47iN8SSnG077uFvN3NBrA.png
https://framerusercontent.com/images/WKfeUJFYa9w8vIjmocjtklmbU.png
https://fonts.gstatic.com/
https://events.framer.com/script?v=2

Questions about copypasteamt.ch

Is copypasteamt.ch safe?: No. MalwareAnalyzer scanned copypasteamt.ch on 21 Aug 2026 and returned a malicious verdict with a score of 60 out of 100, categorised as phishing and credential-harvest. Treat it as hostile until it is re-checked.
How was copypasteamt.ch checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of copypasteamt.ch

Scanned on MalwareAnalyzer by Cyble · Open interactive scan