ScamLens
Cached < 6hAnonymous (3/day)

Security Report for updatefile-cf.top

ScamLens analyzed updatefile-cf.top using 90+ threat intelligence sources and assigned a trust score of 33/100, classifying it as high risk.

Trust Score: 33/100

Risk Level: High Risk

This domain already shows strong risk signals. Stop interacting, preserve the page, chat, phone, and payment evidence, and move into response or reporting immediately.

Site Title
updatefile-cf.top
Website meta information unavailable
HTTPS ✗
1
Checked 1 times

Quick Answer

This domain already shows strong risk signals. Stop interacting, preserve the page, chat, phone, and payment evidence, and move into response or reporting immediately.

Positive Signals

  • + Google Safe Browsing: Safe

Concerns

  • - High-risk top-level domain (.top)
  • - Domain registered only 3 month ago

Score Breakdown

Domain Reputation 30
Newly registered
Threat Intelligence 98
7/8 safeSafeBrowsing OK
Technical Security 50
Community Reputation 50
No community data yet

Was this assessment accurate?
0 say Safe0 say Suspicious
What do you think?
What to do next

updatefile-cf.top looks like a phishing site

At least one trusted threat-intelligence feed flagged this domain. Treat any credential prompt as hostile.

Confidence:High
  1. Do not enter passwords or card details
    Phishing pages clone legitimate brand UIs to steal credentials. If you already entered them, change those passwords immediately on the real site.
  2. Close the tab and clear browser data for this domain
    This breaks any session cookie the page set and reduces the risk of follow-up phishing prompts.
  3. Report it so others are protected
    One community report can warn thousands of visitors. Use the button below.
Cross-check with independent scanners

Trust but verify — open this domain on unrelated security services and compare the verdict.

VirusTotalurlscan.ioGoogle Safe Browsing
How we decide thisReport this site

Sign in to run the AI risk analysis

The threat-intelligence signals below are available to everyone. The plain-language AI risk summary is generated on demand for signed-in users — sign in (free) to run it for this domain.

Threat-intelligence sources

Checked across 28 sources — 1 flagged this domain

Show source breakdown
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • global_timeout clean
  • alienvault_otx flagged
  • openphish clean
  • scam_blocklist clean
  • maltrail clean
  • crypto_scam_feed clean
  • phishing_army clean
  • hagezi_tif clean
  • red_flag_domains clean

ScamLens aggregates real-time signals from 90+ commercial and open-source threat-intelligence providers including Google Safe Browsing, VirusTotal, PhishTank, URLhaus, ThreatFox, Cloudflare Radar, OTX, IPQS, GoPlus, Honeypot.is, and more. A flagged signal is evidence; the absence of flags is not proof of safety. Use the signals below alongside community reports to decide.

Advanced Scan

Comprehensive data lookup across premium sources

$2.99one-time payment
  • Website history verification
  • Detailed WHOIS information
  • Reverse WHOIS association
  • Traffic rank analysis
  • Company registration check
Recommended

AI Deep Investigation

Cross-check the story, claims, and supporting evidence before you decide

$4.99one-time payment
  • Everything in Advanced Scan
  • AI website content analysis
  • AI cross-reference verification
  • Claim authenticity validation
  • Detailed report with evidence
Most Thorough

Comprehensive Investigation

Full-spectrum investigation with company deep search & social intelligence

$14.99one-time payment
  • Everything in Deep Investigation
  • AI company background search
  • Social media intelligence
  • Detailed suspicious point analysis
  • Event timeline & entity connections

This analysis is for informational purposes only and does not constitute a legal determination.

Security Sources

Google Safe Browsing
Safe
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
global_timeout Confidence: Low
Not Listed
AlienVault OTX Confidence: Medium
Unsafe
OpenPhish Confidence: Low
Not Listed
Scam Blocklist (Jarelllama) Confidence: Low
Not Listed
Maltrail (stamparm) Confidence: Low
Not Listed
Crypto Scam Feed Confidence: Low
Not Listed
Phishing Army Confidence: Low
Not Listed
HaGeZi Threat Intelligence Confidence: Low
Not Listed
Red Flag Domains Confidence: Low
Not Listed

Domain Information

Registrar
NICENIC INTERNATIONAL GROUP CO., LIMITED
Created
May 12, 2026
Expires
May 12, 2027
Domain Age
3 months
DNSSEC
Disabled
Nameservers
ns3.my-ndns.com., ns4.my-ndns.com.
Domain Status
client delete prohibited client transfer prohibited

SSL/TLS Certificate

No data available

Server Information

IP Address
144.31.236.66
Hosting Provider
Emil Vitukhnovskii trading as Great Flower
ASN
AS202226 Emil Vitukhnovskii trading as Great Flower
Server Location
Falkenstein, Germany
Organization
Great Flower

Related Intelligence
Technical Details (DNS / Headers / Subdomains)

DNS Records

Email Security

SPF Not Configured DMARC Not Configured
Type Value
A 144.31.236.66
NS ns4.my-ndns.com
NS ns3.my-ndns.com

HTTP Security Headers

Security header detection was blocked by the target website (e.g. rate limiting or access restriction). Results may be inaccurate.

Channels / Subdomains

No data available

Community Reports

Log in to report and share your experience

...

Report & Take Down This Website

High-Risk Signals

The risk signals are strong enough. Move on evidence preservation, reporting, and victim response now

This result is no longer just a normal verification case. Moving the chat, phone, payment, and official-reporting path in parallel is usually more important than waiting for more data.

Recommended First

Move into the victim action plan

If you already paid, logged in, or installed tools, use the action plan first to prioritize containment and evidence work.

Move into the website-reporting flow

Move the site, payment evidence, chat trail, and contact points into the formal reporting path.

Add the chat, DM, and payment-pressure trail

Keep the Telegram, WhatsApp, social DM, and payment-pressure trail in the same timeline.

Check the callback number and SMS

If the actor also used calls, SMS, or one-time codes, verify that phone path next.

The results are based on multiple third-party data sources and AI models. False positives or negatives may occur. This report should not be used as the sole basis for any decision. Please verify with additional sources.

If a loss already happened, move into the response flow now

Delay is the main risk with high-risk domains. Prioritize freezes, credential resets, reporting, and evidence preservation now.

Start the response

If no loss happened yet, continue with the website-reporting and official-agency paths next.

Related Security Guides

Learn more about how to protect yourself from this type of threat.

How to Check if a Website Is Safe Phishing Scams Guide

FAQ

Is updatefile-cf.top safe to visit?

updatefile-cf.top received a trust score of 33/100 from ScamLens, indicating several security concerns. 1 threat intelligence sources flagged this domain. Proceed with extreme caution.

Was updatefile-cf.top flagged by any threat databases?

updatefile-cf.top was flagged by 1 out of 30+ threat intelligence sources. Specifically flagged by: alienvault_otx. The detected threat categories include: general threat.

How old is updatefile-cf.top?

updatefile-cf.top was first registered on May 12, 2026, making it approximately 3 months old. While relatively new, the domain has been active for several months.

Does updatefile-cf.top use HTTPS and have a valid SSL certificate?

ScamLens could not verify the SSL certificate details for updatefile-cf.top during this scan. Treat this as unavailable evidence, not as proof that the site is safe or unsafe.

What security headers does updatefile-cf.top implement?

No security header information was available for updatefile-cf.top.

What does the ScamLens community think about updatefile-cf.top?

No community votes or reports have been submitted for updatefile-cf.top yet. You can be the first to share your experience.

Where is updatefile-cf.top hosted?

updatefile-cf.top is hosted by Emil Vitukhnovskii trading as Great Flower in Falkenstein, Germany (ASN: ASAS202226 Emil Vitukhnovskii trading as Great Flower).

Is this report useful?

Use this report to tell others to stop interacting now and move straight into containment, evidence preservation, and reporting.

Forward to your parents — they deserve to browse safely too.

About this analysis

This report is generated from real-time data across 90+ threat intelligence sources, combined with AI analysis and community feedback.

Learn about our scoring methodology | Last analyzed: August 9, 2026

All NICENIC INTERNATIONAL GROUP CO., LIMITED domains All Emil Vitukhnovskii trading as Great Flower domains

Other domains registered with NICENIC INTERNATIONAL GROUP CO., LIMITED

Other domains on the same server