Self-signals + external verdict
Self-signals from static HTML + DNS blocklists; the authoritative verdict is the external checks — we don't invent scores. JS-injected drainer scripts may be missed.
Risk (signal aggregation)
Cleanno self-signal raised a flag
This is an aggregation of our self-signals, not a verdict — the authoritative call is the External checks below.
DNS blocklists
Listingsnonechecked 9 lists, all clean
Checked IPs216.198.53.11216.198.54.11
Lists that refuse public resolvers (Spamhaus …) live in External checks below.
Crypto / scam signals
⭐ Wallet addresses found in the page — each reverses out to every site referencing it (drainer-network clustering).
BTC3b62525bdab669b7b17d1a9d8b5d46b4↗⌕ reverse — every site referencing this wallet →
Favicon clone
SHA-256 of /favicon.ico — a shared hash reverses out to every site serving the same icon (clone / kit detection).
favicon86c078bc3975268c…↗⌕ reverse — sites with this favicon →
External checks
The authoritative verdict — these open the third-party service in your browser. We link, we don't score.
Reputation
VirusTotal70+ AV / URL scanners' verdicts on this target (external).external ↗urlscan.ioRecorded page scans, screenshots and connections (external).external ↗Cisco TalosTalos reputation & email/web block status (external).external ↗Google Safe BrowsingGoogle's Safe Browsing status for this site (external).external ↗ScamAdviser
host: help.stiefmutter.comcollected just now↻ Refresh