linkvertise.com - suspicious URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned linkvertise.com and returned a suspicious verdict (score 28). The page resolved to 104.18.0.75 on Cloudflare, Inc. in US. The domain was registered 4168 days ago through Cronon GmbH. 6 domains and 2 IPs were contacted, over 6 HTTP requests. 9 malware samples communicate with this URL (Razy, Copak). The request followed 1 redirect before landing. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 28) · Confidence 34%
- Scanned URL:
https://direct-link.net/ - Domain: linkvertise.com · IP: 104.18.0.75 · AS13335 · US
- Server: cloudflare
- Page title: Linkvertise | The Search Engine for exclusive Content!
- HTTP status: 200 · text/html; charset=utf-8
- Registrar: Cronon GmbH · domain age 4168 days · created 2015-03-22
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 13 22: · subject CN=linkvertise.com
- HTTP requests captured: 6
- Scan tier: fast · observed 2026-08-19 22:24:18 UTC
Redirect chain
https://direct-link.net/https://linkvertise.com/?o=sharing
Malware communicating with this URL (9)
These samples were observed contacting or being served from linkvertise.com. Each links to its full analysis.
- Razy - contacted ·
9f94db81a05b992208260aa15e218899· first seen 2026-08-19 - virussign.com_992f3fa3abd6c38fd71dd8dcbab97fe0.vir - contacted ·
02df8c5b2b9195dd7424541d072601d8· first seen 2026-08-19 - Copak - contacted ·
e5f174a2ed7ed8cf329ec05432d7c567· first seen 2026-08-16 - Copak - contacted ·
4a60743d1e74760ffcc9e658b2a475bc· first seen 2026-08-11 - Copak - contacted ·
c2534eccf4143ea3b6e26506a454bf17· first seen 2026-08-11 - Copak - contacted ·
92059438aefc84ecb6875c46515ffb94· first seen 2026-08-11 - e227eb99329d2401af40b2895584971d138761952f82ba63e79d5affd433f8fb - contacted ·
e227eb99329d2401af40b2895584971d· first seen 2026-08-11 - f64edc162d5f6e64e3f64d34d1e94d6aaabd6ca4280e645c8680039762b02c53 - contacted ·
f64edc162d5f6e64e3f64d34d1e94d6a· first seen 2026-08-11 - Copak - contacted ·
05e2815688bb8aac0ca3091ac102d850· first seen 2026-08-11
Antivirus & YARA (1 of 47 engines)
- YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)
These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.
Why this verdict
- Antivirus/YARA detection in page content: DLV_HTML_Smuggling
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- Google Analytics
Contacted infrastructure
- 104.18.0.75 - AS13335 Cloudflare, Inc. (United States)
- 104.21.61.249 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- linkvertise.com
- fonts.gstatic.com
- sitemap.linkvertise.com
- goo.gl
- js.chargebee.com
- www.googletagmanager.com
- 104.18.0.75
- 104.21.61.249
- https://linkvertise.com/?o=sharing
- https://fonts.gstatic.com/
- https://linkvertise.com/
- https://linkvertise.com/favicon.ico
- https://sitemap.linkvertise.com/sitemap
- http://goo.gl/VDJNS
- https://linkvertise.com/apple-icon-57x57.png
- https://linkvertise.com/apple-icon-60x60.png
- https://linkvertise.com/apple-icon-72x72.png
- https://linkvertise.com/apple-icon-76x76.png
- https://linkvertise.com/apple-icon-114x114.png
- https://linkvertise.com/apple-icon-120x120.png
Other scans of linkvertise.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown ·
https://linkvertise.com/13469/AFK9IqzvctpL?o=sharing - 23 Aug 2026 - unknown ·
https://linkvertise.com/dashboard?publisherClosed=true - 23 Aug 2026 - unknown ·
https://linkvertise.com/ - 23 Aug 2026 - unknown
- 23 Aug 2026 - unknown ·
https://linkvertise.com/13469/AFK9IqzvctpL?o=sharing - 22 Aug 2026 - unknown ·
https://linkvertise.com/13469/AFK9IqzvctpL?o=sharing - 22 Aug 2026 - unknown ·
https://linkvertise.com/dashboard?publisherClosed=true - 22 Aug 2026 - unknown ·
https://linkvertise.com/ - 22 Aug 2026 - suspicious
- 22 Aug 2026 - unknown ·
https://linkvertise.com/13469/AFK9IqzvctpL?o=sharing
Questions about linkvertise.com
- Is linkvertise.com safe?
- No. MalwareAnalyzer scanned linkvertise.com on 19 Aug 2026 and returned a suspicious verdict with a score of 28 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with linkvertise.com?
- 9 analysed samples communicate with this URL, including Razy, Copak.
- How was linkvertise.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of linkvertise.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan