9ecbthiemiechaseiqui.iifgurnx.ggziosky.wccheck-4123a9a2-b.members.gospelfortheleast.duckdns.org - malicious URL scan, 22 Aug 2026

Q: Is 9ecbthiemiechaseiqui.iifgurnx.ggziosky.wccheck-4123a9a2-b.members.gospelfortheleast.duckdns.org safe?

No. MalwareAnalyzer scanned 9ecbthiemiechaseiqui.iifgurnx.ggziosky.wccheck-4123a9a2-b.members.gospelfortheleast.duckdns.org on 22 Aug 2026 and returned a malicious verdict with a score of 100 out of 100, categorised as suspicious-infrastructure. Treat it as hostile until it is re-checked.

Q: How was 9ecbthiemiechaseiqui.iifgurnx.ggziosky.wccheck-4123a9a2-b.members.gospelfortheleast.duckdns.org checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

MalwareAnalyzer by Cyble scanned 9ecbthiemiechaseiqui.iifgurnx.ggziosky.wccheck-4123a9a2-b.members.gospelfortheleast.duckdns.org and returned a malicious verdict (score 100), categorised as suspicious-infrastructure. The page resolved to 158.69.195.181 on OVH Hosting, Inc. in CA. The domain was registered 4879 days ago through Gandi SAS. 63 domains and 33 IPs were contacted, over 413 HTTP requests. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 100) · Confidence 100%
Scanned URL: https://9ecbthiemiechaseiqui.iifgurnx.ggziosky.wccheck-4123a9a2-b.members.gospelfortheleast.duckdns.org/
Domain: 9ecbthiemiechaseiqui.iifgurnx.ggziosky.wccheck-4123a9a2-b.members.gospelfortheleast.duckdns.org · IP: 158.69.195.181 · AS16276 · CA
Page title: National Resource for Network Biology
HTTP status: 200 · text/html; charset=utf-8
Registrar: Gandi SAS · domain age 4879 days · created 2013-04-12
TLS issuer: C=US, O=Let's Encrypt, CN=YE2 · valid to Nov 20 05:
HTTP requests captured: 413 · cookies set: 12 · outgoing links: 500
Scan tier: standard · observed 2026-08-22 13:47:06 UTC

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Runtime data beacon to stats.senty.com.au
Runtime data beacon to colormagic.app
Algorithmically-generated (DGA-like) hostname
Certificate issued < 48h ago

Detected technologies

Express
Google Analytics
jQuery
Bootstrap

Contacted infrastructure

158.69.195.181 - AS16276 OVH Hosting, Inc. (Canada)
142.251.157.4 - AS15169 Google LLC (US)
142.250.195.163 - AS15169 Google LLC (India)
142.250.195.104 - AS15169 Google LLC (India)
142.250.207.3 - AS15169 Google LLC (Japan)
142.251.222.232 - AS15169 Google LLC (Malaysia)
172.217.25.194 - AS15169 Google LLC (Malaysia)
151.101.30.49 - AS54113 Fastly, Inc. (Australia)
185.199.109.153 - AS54113 GitHub, Inc. (United States)
104.17.208.5 - AS13335 Cloudflare, Inc. (United States)
185.199.111.153 - AS54113 GitHub, Inc. (United States)
185.199.108.153 - AS54113 GitHub, Inc. (United States)

Observed indicators

9ecbthiemiechaseiqui.iifgurnx.ggziosky.wccheck-4123a9a2-b.members.gospelfortheleast.duckdns.org
html5shim.googlecode.com
www.youtube.com
www.cytoscape.org
www.nigms.nih.gov
nexontology.org
www.nature.com
apps.cytoscape.org
www.nexontology.org
www.cbioportal.org
genemania.org
www.ncbi.nlm.nih.gov
fonts.gstatic.com
www.googletagmanager.com
ssl.google-analytics.com
fonts.googleapis.com
monu.delivery
www.gstatic.com
pagead2.googlesyndication.com
faves.grow.me

Questions about 9ecbthiemiechaseiqui.iifgurnx.ggziosky.wccheck-4123a9a2-b.members.gospelfortheleast.duckdns.org

Is 9ecbthiemiechaseiqui.iifgurnx.ggziosky.wccheck-4123a9a2-b.members.gospelfortheleast.duckdns.org safe?: No. MalwareAnalyzer scanned 9ecbthiemiechaseiqui.iifgurnx.ggziosky.wccheck-4123a9a2-b.members.gospelfortheleast.duckdns.org on 22 Aug 2026 and returned a malicious verdict with a score of 100 out of 100, categorised as suspicious-infrastructure. Treat it as hostile until it is re-checked.
How was 9ecbthiemiechaseiqui.iifgurnx.ggziosky.wccheck-4123a9a2-b.members.gospelfortheleast.duckdns.org checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of 9ecbthiemiechaseiqui.iifgurnx.ggziosky.wccheck-4123a9a2-b.members.gospelfortheleast.duckdns.org

Scanned on MalwareAnalyzer by Cyble · Open interactive scan