www.healthdata.org - URL scan, 15 Aug 2026
MalwareAnalyzer by Cyble scanned www.healthdata.org and returned a unknown verdict (score -2), categorised as credential-harvest. The page resolved to 104.19.211.69 on Cloudflare, Inc. in US. The domain was registered 5092 days ago through Tiger Technologies LLC. 8 domains and 1 IP were contacted, over 4 HTTP requests. 13 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 15 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -2) · Confidence 8%
- Scanned URL:
https://www.healthdata.org/sites/default/files/resumes/58023923203.pdf - Domain: www.healthdata.org · IP: 104.19.211.69 · AS13335 · US
- Server: cloudflare
- Page title: Page not found | Institute for Health Metrics and Evaluation
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: Tiger Technologies LLC · domain age 5092 days · created 2012-09-05
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 8 18: · subject CN=www.healthdata.org
- HTTP requests captured: 4
- Scan tier: standard · observed 2026-08-15 17:13:57 UTC
Malware communicating with this URL (13)
These samples were observed contacting or being served from www.healthdata.org. Each links to its full analysis.
- Phishing - referenced ·
27150c3729289ae025bb30fad2c1c785· first seen 2026-08-15 - Phishing - referenced ·
fcb1334687b42d16b6f19636dddaa8ff· first seen 2026-08-15 - Phishing - referenced ·
6e1639aeb858a177b193aa02ee1cf9c3· first seen 2026-08-14 - Phishing - referenced ·
2f39c545269f740462cc9a95a3be5fc7· first seen 2026-08-14 - Phishing - referenced ·
adccd0d4f5b725274bd4a3ab9cf3fcf0· first seen 2026-08-14 - Phishing - referenced ·
4383e70041ba7d426a7758d71bf868bf· first seen 2026-08-14 - Phishing - referenced ·
86b2a2757f23905c25b9b90e227b1145· first seen 2026-08-14 - Phishing - referenced ·
8a01532f420fe2817fc938ac4dd5bc8b· first seen 2026-08-13 - Phishing - referenced ·
2fdc0faa6402b5f83d9300e34e675056· first seen 2026-08-13 - Phishing - referenced ·
d944bf4131672fa4a52e013787672c98· first seen 2026-08-13 - Phishing - referenced ·
774c30701bdf55b4d53a1d607523c18b· first seen 2026-08-13 - vudezuluxi.pdf - referenced ·
edbf8e75daa93819e9f28e12f055afc8· first seen 2026-08-13 - Phishing - referenced ·
8ccf6b9fb2ea2f6217f3878d5eb0f5b2· first seen 2026-08-12
Antivirus & YARA (0 of 44 engines)
No engine flagged this page's content.
Categories
- credential-harvest
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
- Credential-harvesting form
Detected technologies
- Cloudflare
- PHP
- Drupal
- Google Analytics
Contacted infrastructure
- 104.19.211.69 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- www.healthdata.org
- www.googletagmanager.com
- ghdx.healthdata.org
- x.com
- www.linkedin.com
- www.youtube.com
- www.facebook.com
- www.washington.edu
- 104.19.211.69
- https://www.healthdata.org/sites/default/files/resumes/58023923203.pdf
- https://www.googletagmanager.com/gtag/js?id=UA-10018300-1
- https://www.healthdata.org/
- https://www.healthdata.org/sites/default/files/favicons/apple-touch-icon.png
- https://www.healthdata.org/sites/default/files/favicons/favicon-32x32.png
- https://www.healthdata.org/sites/default/files/favicons/favicon-16x16.png
- https://www.healthdata.org/sites/default/files/favicons/site.webmanifest
- https://www.healthdata.org/sites/default/files/favicons/safari-pinned-tab.svg
- https://www.healthdata.org/sites/default/files/cache/css/css_VKeziR2k3pZb4cp_A3n2r14LroZujUcxkkGR3koZOIg.css?delta=0&language=en&theme=healthdata&include=eJxNim0OgjAMhi803JleWDMqHSVtIeDpRYOGn8_HoEa52LpAHnhiT8NHzGoNwi9KtIfwPP2WC9NIkBgLArmK9pDO4zhLvRcV3si047aoBZX_44GTbeLIPZzu3MgdlTz54UHt29-YsUA7
- https://www.healthdata.org/sites/default/files/cache/css/css_aFfQJ2d56SBwS38R5ndmHnmqBwX9LCSR13YuKk9BGbQ.css?delta=1&language=en&theme=healthdata&include=eJxNim0OgjAMhi803JleWDMqHSVtIeDpRYOGn8_HoEa52LpAHnhiT8NHzGoNwi9KtIfwPP2WC9NIkBgLArmK9pDO4zhLvRcV3si047aoBZX_44GTbeLIPZzu3MgdlTz54UHt29-YsUA7
- https://www.healthdata.org/about/contact-us
Other scans of www.healthdata.org (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/mevupuxapiledowitire.pdf - 19 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/mevupuxapiledowitire.pdf - 17 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/fanonexujezurexuli.pdf - 16 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/sutuzosugogaw.pdf - 16 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/68382108709.pdf - 16 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/78922999772.pdf - 16 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/78922999772.pdf - 16 Aug 2026 - unknown
- 14 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/sametuzovu.pdf - 14 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/sametuzovu.pdf
Questions about www.healthdata.org
- Is www.healthdata.org safe?
- The scan of www.healthdata.org on 15 Aug 2026 reached no verdict either way (score -2). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.healthdata.org?
- 13 analysed samples communicate with this URL, including Phishing.
- How was www.healthdata.org checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.healthdata.org
Scanned on MalwareAnalyzer by Cyble · Open interactive scan