friendlycc.com - suspicious URL scan, 16 Aug 2026

MalwareAnalyzer by Cyble scanned friendlycc.com and returned a suspicious verdict (score 44), categorised as suspicious-infrastructure, credential-harvest. The page resolved to 192.0.78.24 on Automattic, Inc in US. The domain was registered 8756 days ago through eNom, LLC. 10 domains and 2 IPs were contacted, over 3 HTTP requests. The request followed 2 redirects before landing. This is a point-in-time observation from 16 Aug 2026; the page may have changed since.

Scan result

• Verdict: suspicious (score 44) · Confidence 56%
• Scanned URL: http://www.friendlycc.com/sites/default/files/webform/zuguxinukebezukul.pdf
• Domain: friendlycc.com · IP: 192.0.78.24 · AS2635 · US
• Server: nginx
• Page title: Page not found – Friendly Computer Center, LLC
• HTTP status: 404 · text/html; charset=UTF-8
• Registrar: eNom, LLC · domain age 8756 days · created 2002-08-25
• TLS issuer: C=US, O=Google Trust Services, CN=WR1 · valid to Nov 6 06: · subject CN=tls.automattic.com
• HTTP requests captured: 3
• Scan tier: standard · observed 2026-08-16 14:15:31 UTC

Redirect chain

1. http://www.friendlycc.com/sites/default/files/webform/zuguxinukebezukul.pdf
2. https://www.friendlycc.com/sites/default/files/webform/zuguxinukebezukul.pdf
3. https://friendlycc.com/sites/default/files/webform/zuguxinukebezukul.pdf

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Categories

• suspicious-infrastructure
• credential-harvest

Why this verdict

• Credential-harvesting form
• Algorithmically-generated (DGA-like) hostname
• Valid TLS, no impersonation or off-origin credential post
• Cross-host redirect chain

Detected technologies

• Nginx
• WordPress
• Drupal

Contacted infrastructure

• 192.0.78.24 - AS2635 Automattic, Inc (United States)
• 192.0.78.25 - AS2635 Automattic, Inc (United States)

Observed indicators

• friendlycc.com
• r-login.wordpress.com
• s0.wp.com
• dazzling-cchamlee.wordpress.com
• s1.wp.com
• s2.wp.com
• friendlycc.screenconnect.com
• 0.gravatar.com
• subscribe.wordpress.com
• wordpress.com
• 192.0.78.24
• 192.0.78.25
• https://friendlycc.com/sites/default/files/webform/zuguxinukebezukul.pdf
• https://friendlycc.com/remote-login.php?wpcom_remote_login=validate
• https://r-login.wordpress.com/remote-login.php?wpcom_remote_login=request_access&origin=
• https://r-login.wordpress.com/remote-login.php
• https://s0.wp.com/
• https://friendlycc.com/feed/
• https://friendlycc.com/comments/feed/
• https://friendlycc.com/_static/??/wp-content/mu-plugins/core-compat/wp-mediaelement.css,/wp-content/mu-plugins/wpcom-bbpress-premium-themes.css?m=1432920480j&cssminify=yes

Other scans of friendlycc.com (10)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

• 19 Aug 2026 - malicious · https://friendlycc.com/sites/default/files/webform/tojatovovezugunubi.pdf
• 19 Aug 2026 - suspicious · https://friendlycc.com/sites/default/files/webform/tojatovovezugunubi.pdf
• 17 Aug 2026 - suspicious · https://friendlycc.com/sites/default/files/webform/tojatovovezugunubi.pdf
• 16 Aug 2026 - malicious · https://friendlycc.com/sites/default/files/webform/16921441106.pdf
• 16 Aug 2026 - suspicious · https://friendlycc.com/sites/default/files/webform/kilolegejesap.pdf
• 15 Aug 2026 - malicious · https://friendlycc.com/sites/default/files/webform/topevonizudurazot.pdf
• 15 Aug 2026 - suspicious · https://friendlycc.com/sites/default/files/webform/topevonizudurazot.pdf
• 15 Aug 2026 - suspicious · https://friendlycc.com/sites/default/files/webform/47778491084.pdf
• 15 Aug 2026 - malicious · https://friendlycc.com/sites/default/files/webform/85881129832.pdf
• 15 Aug 2026 - suspicious · https://friendlycc.com/sites/default/files/webform/85881129832.pdf

Questions about friendlycc.com

Is friendlycc.com safe?

No. MalwareAnalyzer scanned friendlycc.com on 16 Aug 2026 and returned a suspicious verdict with a score of 44 out of 100, categorised as suspicious-infrastructure and credential-harvest. Treat it as hostile until it is re-checked.

How was friendlycc.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of friendlycc.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan