Is ww547.xn--evdebakmhizmetleri-k0c.com safe?

No. MalwareAnalyzer scanned ww547.xn--evdebakmhizmetleri-k0c.com on 21 Aug 2026 and returned a suspicious verdict with a score of 36 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was ww547.xn--evdebakmhizmetleri-k0c.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

ww547.xn--evdebakmhizmetleri-k0c.com - suspicious URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned ww547.xn--evdebakmhizmetleri-k0c.com and returned a suspicious verdict (score 36), categorised as phishing. The page resolved to 34.160.121.137 on Google LLC in US. 2 domains and 2 IPs were contacted. The request followed 1 redirect before landing. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 36) · Confidence 42%
Scanned URL: http://xn--evdebakmhizmetleri-k0c.com/uploads/file/gonejezatufidu.pdf
Domain: ww547.xn--evdebakmhizmetleri-k0c.com · IP: 34.160.121.137 · AS396982 · US
Page title: Xnevdebakmēhizmetleri
HTTP status: 200 · text/html; charset=utf-8
Scan tier: standard · observed 2026-08-21 11:25:29 UTC

Redirect chain

http://xn--evdebakmhizmetleri-k0c.com/uploads/file/gonejezatufidu.pdf
http://ww547.xn--evdebakmhizmetleri-k0c.com/?tkn=19vnMT3S

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Homograph / mixed-script domain (IDN spoofing)
Served over plaintext HTTP

Detected technologies

Express

Contacted infrastructure

34.160.121.137 - AS396982 Google LLC (United States)
78.157.209.172 - AS42831 DER005 (United Kingdom)

Observed indicators

ww547.xn--evdebakmhizmetleri-k0c.com
intivesearch.com
34.160.121.137
78.157.209.172
http://ww547.xn--evdebakmhizmetleri-k0c.com/?tkn=19vnMT3S
https://intivesearch.com/privacy?dmn=xn--evdebakmhizmetleri-k0c.com&testId=17
https://intivesearch.com/terms?dmn=xn--evdebakmhizmetleri-k0c.com&testId=17

Questions about ww547.xn--evdebakmhizmetleri-k0c.com

Is ww547.xn--evdebakmhizmetleri-k0c.com safe?: No. MalwareAnalyzer scanned ww547.xn--evdebakmhizmetleri-k0c.com on 21 Aug 2026 and returned a suspicious verdict with a score of 36 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.
How was ww547.xn--evdebakmhizmetleri-k0c.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of ww547.xn--evdebakmhizmetleri-k0c.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan