www.healthdata.org - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned www.healthdata.org and returned a unknown verdict (score 10), categorised as credential-harvest. The page resolved to 104.19.211.69 on Cloudflare, Inc. in US. The domain was registered 5096 days ago through Tiger Technologies LLC. 8 domains and 1 IP were contacted, over 4 HTTP requests. 21 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 10) · Confidence 13%
- Scanned URL:
https://www.healthdata.org/sites/default/files/resumes/mevupuxapiledowitire.pdf - Domain: www.healthdata.org · IP: 104.19.211.69 · AS13335 · US
- Server: cloudflare
- Page title: Page not found | Institute for Health Metrics and Evaluation
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: Tiger Technologies LLC · domain age 5096 days · created 2012-09-05
- HTTP requests captured: 4
- Scan tier: fast · observed 2026-08-19 17:57:46 UTC
Malware communicating with this URL (21)
These samples were observed contacting or being served from www.healthdata.org. Each links to its full analysis.
- Phishing - referenced ·
7628b7ead5c6d9dcb900ea6a52a049de· first seen 2026-08-19 - Phishing - referenced ·
e83a5a950ce99ff9768501aef5056436· first seen 2026-08-17 - Phishing - referenced ·
bf8752c6399d58e90decae36fea50cdc· first seen 2026-08-16 - Phishing - referenced ·
18c25db6ced31ccd053c87e4e6d5b07d· first seen 2026-08-16 - Phishing - referenced ·
d3850df6ddb73575973fe57eb548243c· first seen 2026-08-16 - Phishing - referenced ·
0a45b027c2103b08473733048510f4a9· first seen 2026-08-16 - Phishing - referenced ·
7085ed66f948beac1f39142272921e0f· first seen 2026-08-15 - Phishing - referenced ·
6bedf85b1230e4e22acf3e90a5bbfcac· first seen 2026-08-15 - Phishing - referenced ·
27150c3729289ae025bb30fad2c1c785· first seen 2026-08-15 - Phishing - referenced ·
fcb1334687b42d16b6f19636dddaa8ff· first seen 2026-08-15 - Phishing - referenced ·
6e1639aeb858a177b193aa02ee1cf9c3· first seen 2026-08-14 - Phishing - referenced ·
2f39c545269f740462cc9a95a3be5fc7· first seen 2026-08-14 - Phishing - referenced ·
adccd0d4f5b725274bd4a3ab9cf3fcf0· first seen 2026-08-14 - Phishing - referenced ·
4383e70041ba7d426a7758d71bf868bf· first seen 2026-08-14 - Phishing - referenced ·
86b2a2757f23905c25b9b90e227b1145· first seen 2026-08-14
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Categories
- credential-harvest
Why this verdict
- Credential-harvesting form
Detected technologies
- Cloudflare
- PHP
- Drupal
- Google Analytics
Contacted infrastructure
- 104.19.211.69 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- www.healthdata.org
- www.googletagmanager.com
- ghdx.healthdata.org
- x.com
- www.linkedin.com
- www.youtube.com
- www.facebook.com
- www.washington.edu
- 104.19.211.69
- https://www.healthdata.org/sites/default/files/resumes/mevupuxapiledowitire.pdf
- https://www.googletagmanager.com/gtag/js?id=UA-10018300-1
- https://www.healthdata.org/
- https://www.healthdata.org/sites/default/files/favicons/apple-touch-icon.png
- https://www.healthdata.org/sites/default/files/favicons/favicon-32x32.png
- https://www.healthdata.org/sites/default/files/favicons/favicon-16x16.png
- https://www.healthdata.org/sites/default/files/favicons/site.webmanifest
- https://www.healthdata.org/sites/default/files/favicons/safari-pinned-tab.svg
- https://www.healthdata.org/sites/default/files/cache/css/css_VKeziR2k3pZb4cp_A3n2r14LroZujUcxkkGR3koZOIg.css?delta=0&language=en&theme=healthdata&include=eJxNim0OgjAMhi803JleWDMqHSVtIeDpRYOGn8_HoEa52LpAHnhiT8NHzGoNwi9KtIfwPP2WC9NIkBgLArmK9pDO4zhLvRcV3si047aoBZX_44GTbeLIPZzu3MgdlTz54UHt29-YsUA7
- https://www.healthdata.org/sites/default/files/cache/css/css_aFfQJ2d56SBwS38R5ndmHnmqBwX9LCSR13YuKk9BGbQ.css?delta=1&language=en&theme=healthdata&include=eJxNim0OgjAMhi803JleWDMqHSVtIeDpRYOGn8_HoEa52LpAHnhiT8NHzGoNwi9KtIfwPP2WC9NIkBgLArmK9pDO4zhLvRcV3si047aoBZX_44GTbeLIPZzu3MgdlTz54UHt29-YsUA7
- https://www.healthdata.org/about/contact-us
Other scans of www.healthdata.org (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown
- 17 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/fanonexujezurexuli.pdf - 16 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/sutuzosugogaw.pdf - 16 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/68382108709.pdf - 16 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/78922999772.pdf - 16 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/78922999772.pdf - 16 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/58023923203.pdf - 15 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/58023923203.pdf - 14 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/sametuzovu.pdf - 14 Aug 2026 - unknown ·
https://www.healthdata.org/sites/default/files/resumes/sametuzovu.pdf
Questions about www.healthdata.org
- Is www.healthdata.org safe?
- The scan of www.healthdata.org on 19 Aug 2026 reached no verdict either way (score 10). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.healthdata.org?
- 21 analysed samples communicate with this URL, including Phishing.
- How was www.healthdata.org checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.healthdata.org
Scanned on MalwareAnalyzer by Cyble · Open interactive scan