Filescan.IO - Next-Gen Malware Analysis Platform

malicious

suspicious phishing

e-commerce

other

English

The domain name 'www.filescan.io' uses the British Indian Ocean Territory country-code top-level domain (.io), featuring subdomain 'www'. The second-level label 'filescan' is 8 characters long split between three vowels and five consonants. Splitting it apart reveals two words: files, can. Average segment length settles at four characters. No strong language cues emerged from the frequency lists.

html/21/a9/21a926c0-fd8d-4e37-b372-10c3e8bed4f5_fallback.html.gz

Filescan.io - Next-Gen Malware Analysis Platform

default-src 'self'; connect-src 'self' https://ingress.us1.rum-ingress-coralogix.com https://ipapi.co https://*.twitter.com https://pbs.twimg.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.2/css/all.min.css https://fonts.googleapis.com https://*.botpress.cloud https://*.googletagmanager.com https://www.google.com https://privacyportal.onetrust.com https://geolocation.onetrust.com https://*.onetrust.com https://*.amplitude.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://app.termly.io https://*.googletagmanager.com https://googletagmanager.com https://tagmanager.google.com https://cdn.jsdelivr.net https://cdn.amcharts.com https://*.twitter.com https://pbs.twimg.com https://cdn.botpress.cloud https://files.bpcontent.cloud https://cdn.cookielaw.org https://cookie-cdn.cookiepro.com https://*.amplitude.com; worker-src 'self' blob:; frame-src 'self' data: https://app.termly.io https://*.twitter.com https://pbs.twimg.com https://www.googletagmanager.com; img-src 'self' data: https://app.termly.io https://www.googletagmanager.com https://googletagmanager.com https://ssl.gstatic.com https://www.gstatic.com https://fastapi.tiangolo.com https://cdn.amcharts.com https://*.twitter.com https://pbs.twimg.com https://files.bpcontent.cloud https://static.opswat.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://cdnjs.cloudflare.com https://cdn.jsdelivr.net https://cdn.amcharts.com https://files.bpcontent.cloud https://static.opswat.com https://googletagmanager.com https://tagmanager.google.com; font-src 'self' data: https://fonts.googleapis.com https://themes.googleusercontent.com https://fonts.gstatic.com https://cdnjs.cloudflare.com https://cdn.amcharts.com https://files.bpcontent.cloud https://static.opswat.com; object-src 'none'; frame-ancestors 'self' https://my.opswat.com https://my-beta.opswat.com https://my-staging.opswat.com;

attachment; filename="community_horizontal.svg"

ffb35a113ce40ce03ed91bbce43188c0fb50c2eeccbb21487f8793371e8c9d8b

fc7967f53c86af1acba5105edcd365c8ff287810f4dcded1f10b87b51f5d350f

1812010741303aa3b5a4854c7e574a55a2a8cdab9d573154e73c3e4d475a3f5d

3c6e932f556cae3ab90b92b2cfa794edc16e0f9b6d4dd4b7fe42f3c2600f14bd

4e1b126a1c2b21962eacdb15c24dcd9818bea1e8e2793db7f3c7b98c524505c4

bba0c77d9e07921c366a547a8bfc7249eedab76013ef8ae32c98a3de083cafa5

7f30321974053edb8956d77991060666569d083c763e2206644d26fde523c824

199f970829b431df09a13cd20cee1f93cd31ce96eecf6ce0c415763e1646249f

Filescan.io
@filescan_itsec·Sep 25
Attackers abused Alibaba #AI brand to push fake #PyPI packages wi

Filescan.io
@filescan_itsec·Jul 25
No files. No links. Just clipboard hijack via fake reCAPTCHA—the 

Filescan.io
@filescan_itsec·Jan 25
Detonator is the untold journey of Jan Miller and how his relentl

Submit malware for analysis on this next-gen malware assessment platform. Filescan GmbH develops and licenses technology to fight malware with a focus on Indicator-of-Compromise (IOC) extraction at scale.

description

malware, virus, trojan, ransomware, static, analysis, indicator of compromise, ioc, extraction, emulation, online, submit, sample, download

keywords

viewport

msapplication-TileColor

msapplication-TileImage

theme-color

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/


      window.dataLayer = window.dataLayer || [];
      window.dataLayer.push({"event":"pageview","page":"/"})


      window.onload = function () {
        const sequentialScripts = [
          [
            // Ozzy chatbot
            { src: 'https://cdn.botpress.cloud/webchat/v2.5/inject.js', id: 'chatbot' },
            { src: 'https://files.bpcontent.cloud/2025/03/31/03/20250331032138-XXN4FW5I.js', id: 'chatbot-content' },
          ],
        ]
        if (window.location.href.indexOf('filescan.io') > -1) {
          sequentialScripts.forEach((scripts) => loadScriptSequential(scripts))
        }

        function loadScript(src, onLoad) {
          const script = document.createElement('script')
          script.src = src.src
          script.id = src.id
          if (onLoad) {
            script.onload = onLoad
          }
          document.body.appendChild(script)
        }

        function loadScriptSequential(scripts) {
          let index = 0

          function loadNext() {
            if (index >= scripts.length) {
              return
            } else {
              loadScript(scripts[index], loadNext)
              index++
            }
          }
          loadNext()
        }
      }
    

Requests	IP Address	Location	AS Autonomous System
39	104.26.15.230	United States	AS13335CLOUDFLARENET
16	65.9.175.110	United States	AS16509AMAZON-02
9	104.18.37.127	United States	AS13335CLOUDFLARENET
3	13.226.244.119	United States	AS16509AMAZON-02
2	142.250.181.234	United States	AS15169GOOGLE
2	172.64.150.129	United States	AS13335CLOUDFLARENET
2	13.226.244.68	United States	AS16509AMAZON-02
2	65.9.175.86	United States	AS16509AMAZON-02
2	172.67.70.67	United States	AS13335CLOUDFLARENET
2	142.250.185.74	United States	AS15169GOOGLE
58	22	-	-

Security Scan Report: www.filescan.io

Summary

AI Security Verdict

Details

Bot Protection Detected

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History