wisteamnepal.org - suspicious URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned wisteamnepal.org and returned a suspicious verdict (score 40), categorised as phishing. The page resolved to 172.67.131.5 on Cloudflare, Inc. in US. 12 domains and 7 IPs were contacted, over 32 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 40) · Confidence 49%
- Scanned URL:
https://wisteamnepal.org/ - Domain: wisteamnepal.org · IP: 172.67.131.5 · AS13335 · US
- Server: cloudflare
- Page title: M77CASINO Situs Resmi Toto Macau dengan Akses Data Macau Akurat dan Terpercaya
- HTTP status: 200 · text/html
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 17 23: · subject CN=wisteamnepal.org
- HTTP requests captured: 32 · outgoing links: 60
- Scan tier: standard · observed 2026-08-21 04:26:12 UTC
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Categories
- phishing
Why this verdict
- Domain impersonates steam (combosquat)
- Certificate issued < 48h ago
- Matches phishing-kit family "Meta / Facebook Login Kit"
Detected technologies
- Cloudflare
- Google Analytics
- Cloudflare Insights
Contacted infrastructure
- 104.21.9.196 - AS13335 Cloudflare, Inc. (United States)
- 104.16.79.73 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- wisteamnepal.org
- amp.sunwflower.uk.com
- www.googletagmanager.com
- img-king-sunflower.com
- ik.imagekit.io
- wa.me
- api.qrserver.com
- static.cloudflareinsights.com
- facebook.com
- www.instagram.com
- www.tiktok.com
- plazaitdotid.pages.dev
- 172.67.131.5
- 104.21.9.196
- 104.21.52.230
- 104.16.79.73
- 3.175.115.40
- 95.216.163.127
- 172.66.47.172
- https://wisteamnepal.org/
Questions about wisteamnepal.org
- Is wisteamnepal.org safe?
- No. MalwareAnalyzer scanned wisteamnepal.org on 21 Aug 2026 and returned a suspicious verdict with a score of 40 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
- How was wisteamnepal.org checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of wisteamnepal.org
Scanned on MalwareAnalyzer by Cyble · Open interactive scan