MalwareTipsTools

Lost money to direct-link.net? Warn othersLost money here? Warn othersRate it · review · follow updates

Rate direct-link.net

One tap is enough. Reviews are moderated and never change our Safety Score.

Is direct-link.net safe?

https://direct-link.net/1357282/I7Eb0vUv1wtb

Moderate RiskStatus
Community ratingNo reviews yet · Write oneCommunity reviews are separate from our Safety Score.

Checked on

How we checked

Coverage: complete · 6 of 6 applicable core capabilities

  • Antivirus (60 of 93 engines answered): completed
  • Google Safe Browsing: completed
  • page reading: completed
  • page capture: completed
  • domain records: completed
  • web research: completed
Verdict

direct-link.net is a Linkvertise redirect gateway that pushes visitors through ad-gated "Get link" steps to reach someone else's content

The address you were given is not a shop, a login page or a download host. It is a short-link gateway: opening it immediately forwards the browser to linkvertise.com with the same link ID, where the visitor is asked to click through advertising steps before a final destination is revealed. The domain itself is old (over eight years) and sits behind a clean hosting IP, and the encrypted connection and Safe Browsing checks came back clean, but one antivirus family does flag the address and the whole purpose of the page is to monetise your click through ads. That combination puts it in the moderate-risk band rather than the safe one.

If you already know and trust the person who sent you this link, expect a few advertising steps and close any pop-up or installer prompt that is not the file you came for. If the link arrived unsolicited, in a comment, or as part of a "free download" offer, skip it — the destination is chosen by the link creator, not by this domain, and you have no way to see where it ends up before you click through.

Tell us the verdict looks wrong

direct-link.net · Staff read every report. Your message is never published, and feedback never changes the score automatically.

What looks wrong?

Share this report

direct-link.net: Moderate Risk — MalwareTips website safety report

Calibrated safety spectrum

Where this site sits

  1. Dangerous1–20
  2. High Risk21–44
  3. Moderate Risk45–69
  4. Low Risk70–84
  5. Safe85–100

The score combines saved evidence strength and analysis quality. Coverage is reported separately.

Score explained

Why 58/100

Moderate Risk covers scores 45–69. 4 findings pulled the score down; 2 pushed it up.

What pulled the score down

  1. StrongThe page automatically sent the browser to an unrelated external site.
  2. Moderate1 independent antivirus family reported an adverse result.
  3. MinorThe page redirected the browser to an unrelated external domain.
  4. MinorSearch results and a screenshot show the standard ad-unlock flow: click Continue, then "Free Access with Ads" or "Get link" to reach the content.

What pushed the score up

  • SupportsThe registrable domain is 3223 days old, so this is not a freshly created throwaway address.
  • SupportsThe hosting IP has an abuse confidence score of 0/100 across zero saved reports, TLS is valid, and Safe Browsing returned no threat warning.

No points per finding are stored for this report: our analysis weighed all findings together to set the score. Each finding shows its saved severity instead (Decisive, Strong, Moderate or Minor).

01 · Investigation Brief

Investigation Brief

The address you were given is not a shop, a login page or a download host. It is a short-link gateway: opening it immediately forwards the browser to linkvertise.com with the same link ID, where the visitor is asked to click through advertising steps before a final destination is revealed. The domain itself is old (over eight years) and sits behind a clean hosting IP, and the encrypted connection and Safe Browsing checks came back clean, but one antivirus family does flag the address and the whole purpose of the page is to monetise your click through ads. That combination puts it in the moderate-risk band rather than the safe one.

What actually happens when you open the link

The saved navigation record shows the page sending the browser straight to an unrelated external domain, from direct-link.net/1357282/I7Eb0vUv1wtb to linkvertise.com/1357282/I7Eb0vUv1wtb. The redirect happens automatically, without the visitor choosing a destination, and the link ID is carried across unchanged.

Independent search results describe the same flow from the visitor's side: copy the link into the address bar, wait, click "Continue", then click "Free Access with Ads" or "Get link" to reach the file or page behind it. A screenshot of the destination shows the Linkvertise branding and a "Get Link" button. In other words, the advertising steps are the product — the content at the end belongs to whoever created the link, not to this domain.

Because the final destination is chosen by whoever generated the short link, the same direct-link.net address pattern can lead to a harmless file one day and to a junk installer or survey page the next. Nothing in the reviewed evidence shows what a specific link resolves to, so treat each one on its own merits.

Technical checks versus the operator side

On the technical side the picture is mixed but not alarming. The registrable domain is 3223 days old, the hosting IP carries an abuse confidence score of 0/100 across zero saved reports, the TLS check found a valid encrypted connection, and the browser threat feed returned no threat warning.

Against that, the antivirus aggregate records 1 malicious and 1 suspicious detection across 93 engines, with one antivirus family reporting an adverse result. A single flag on a high-traffic redirector is common and is not proof of malware, but it is a real signal that some engines consider the address worth blocking.

The operator side is where the score is decided. The page exists to move visitors into an ad-gated workflow on another company's platform, and the contact details behind the redirect were not attributed to this domain, so there is no named business standing behind the link you were given. The landing page itself was read; only the destination's contacts were left out of scope.

Why the score is 58

The page automatically sent the browser to an unrelated external site.

02 · Security Evidence

Security evidence

Antivirus Engines

2/ 93

detections

Fresh result

2 engines flagged this URL

Every saved adverse engine is listed below. The full provider matrix remains available for audit.

Malicious
1
Suspicious
1
Total
93
Adverse antivirus results
EngineFinding
Chong Lua DaoMaliciousmalicious
GridinsoftSuspicioussuspicious
All 93 engine results
  • Chong Lua Dao - Malicious
  • Gridinsoft - Suspicious
  • 0xSI_f33d - Unrated
  • Abusix - Clean
  • Acronis - Clean
  • ADMINUSLabs - Clean
  • AILabs (MONITORAPP) - Clean
  • AlienVault - Clean
  • alphaMountain.ai - Clean
  • AlphaSOC - Unrated
  • Antiy-AVL - Clean
  • ArcSight Threat Intelligence - Unrated
  • AutoShun - Unrated
  • Bfore.Ai PreCrime - Unrated
  • BitDefender - Clean
  • Bkav - Unrated
  • BlockList - Clean
  • Blueliv - Clean
  • Certego - Clean
  • ChainPatrol - Unrated
  • CINS Army - Clean
  • CRDF - Clean
  • Criminal IP - Unrated
  • CSIS Security Group - Unrated
  • CTX AI - Clean
  • Cyan - Unrated
  • Cyble - Clean
  • CyRadar - Clean
  • desenmascara.me - Clean
  • DNS8 - Unrated
  • Dr.Web - Clean
  • EmergingThreats - Clean
  • Emsisoft - Clean
  • Ermes - Unrated
  • ESET - Clean
  • ESTsecurity - Clean
  • Forcepoint ThreatSeeker - Clean
  • Fortinet - Clean
  • Fortra - Unrated
  • G-Data - Clean
  • GCP Abuse Intelligence - Unrated
  • Google Safe Browsing - Clean
  • GreenSnow - Clean
  • GreyNoise - Unrated
  • Guardpot - Unrated
  • Heimdal Security - Clean
  • Hunt.io Intelligence - Unrated
  • IPsum - Clean
  • Juniper Networks - Clean
  • K7AntiVirus - Unrated
  • Kaspersky - Clean
  • LevelBlue - Clean
  • Lionic - Clean
  • Lumu - Unrated
  • Malwared - Clean
  • MalwarePatrol - Clean
  • MalwareURL - Unrated
  • Mimecast - Unrated
  • Netcraft - Unrated
  • OpenPhish - Clean
  • Orcapot - Unrated
  • PhishFort - Unrated
  • Phishing Database - Clean
  • Phishtank - Clean
  • PREBYTES - Clean
  • PrecisionSec - Unrated
  • Quick Heal - Clean
  • Quttera - Clean
  • Rising - Clean
  • SafeToOpen - Unrated
  • Sangfor - Clean
  • Sansec eComscan - Unrated
  • Scantitan - Clean
  • SCUMWARE.org - Clean
  • Seclookup - Clean
  • Snort IP sample list - Unrated
  • SOCRadar - Unrated
  • Sophos - Clean
  • StopForumSpam - Clean
  • Sucuri SiteCheck - Clean
  • Synthient - Unrated
  • ThreatHive - Clean
  • URLhaus - Clean
  • URLQuery - Unrated
  • Viettel Threat Intelligence - Clean
  • VIPRE - Unrated
  • ViriBack - Clean
  • VX Vault - Clean
  • Webroot - Clean
  • Xcitium Verdict Cloud - Clean
  • Yandex Safebrowsing - Clean
  • ZeroCERT - Clean
  • ZeroFox - Unrated

How security vendors categorise this site

  • alphaMountain.aiAds/Analytics, Information Technology
  • BitDefenderbusiness
  • Forcepoint ThreatSeekerinformation technology
  • Sophosgames

Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.

Security Scans

Browser Threat Feed
Not flagged on major threat lists

Checked against the browser threat feeds available to this scan — no hit.

What we observed

Screenshot of direct-link.net
CAPTURED PAGE
direct-link.net
What our review noticed on this page
Visual analysis

Visual context from the captured page

Get Link from ibb.co

Context only

What the captured page showed

1 observation
  1. 01

    Get Link from ibb.co

What the page says about itself

Quoted from the pages we read: the site's own words, not our findings.

Page title
Linkvertise | The Search Engine for exclusive Content!

Pages we read

  • Main page/1357282/I7Eb0vUv1wtbRead

03 · Investigation Story

Investigation story

  1. What the site claims

    Linkvertise | The Search Engine for exclusive Content!

  2. What we observed

    Saved browser evidence recorded forced redirects, cross domain landing.

  3. What independent research found

    2 external findings were saved and compared with the page evidence.

  4. What remains unverified

    The checks completed, but ownership, business claims, and future site behavior can still change after this snapshot.

What kind of site and risk is this?

Threat category

Aggressive Ads & Malvertising

Service and business model

Content

Advertising

Observed behavior

Forced RedirectsCross Domain Landing

Evidence behind this classification

  1. 01The page automatically sent the browser to an unrelated external site.
  2. 02The page redirected the browser to an unrelated external domain.
  3. 031 malicious and 1 suspicious detection across 93 engines, with one antivirus family reporting an adverse result.

If this is a scam — what it means for you

What a visitor is exposed to on the way through

A visitor who opens the link is handed to linkvertise.com automatically and asked to click "Continue" and then "Free Access with Ads" or "Get link" before any content appears. The exposure at that point is advertising and whatever the ad steps place in front of you, not a checkout on this domain.

If this is a scam, how it works

The evidence-backed path

Each stage below is preserved from the grounded analysis and linked to saved evidence.

  1. The destination shown in the screenshot is the Linkvertise "Get Link" screen, which is the standard ad-unlock step for this platform. Nothing in the reviewed evidence shows a payment form, a credential prompt or a file download served by direct-link.net itself.

If you already know and trust the person who sent you this link, expect a few advertising steps and close any pop-up or installer prompt that is not the file you came for. If the link arrived unsolicited, in a comment, or as part of a "free download" offer, skip it — the destination is chosen by the link creator, not by this domain, and you have no way to see where it ends up before you click through.

Aggressive Ads & MalvertisingConfidence: Moderate

Grounded in 4 saved evidence references.

Web research findings

Independent findings for direct-link.net, including public complaints, named review sources, registration records, and look-alike-domain evidence.

Not checked
Not run for this report
Company-registry lookup, site-clone comparison and look-alike domain comparison.
Web mentions
No scam reports found
The completed search returned no sourced scam reports or complaints.

No independently sourced scam reports or credibility records were found for direct-link.net. That is common for new or low-traffic sites and does not clear the site.

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

04 · Domain & Infrastructure

Domain & infrastructure

Timeline · identity · encryption · redirects · hosting

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too.

Infrastructure map

  1. Domaindirect-link.net
  2. Redirects tolinkvertise.com
  3. Hosted byCloudflare, Inc.
  4. Referencesfonts.gstatic.com · js.chargebee.com

Domain Timeline

  1. Jan 9, 2018
    Domain registered

    First appeared in WHOIS records — 8 years old when this review was saved.

  2. Nov 7, 2026
    Saved security review — Rated Moderate Risk

    The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.

Contact Verification

Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.

What We Found
Contact details were not attributed (the address redirects to another site)
Emails on site's domainNot reviewed
Phone numbersNot reviewed
Postal addressNot reviewed
Linked social profiles0

Domain & Encryption

Domain History
Age8 years old
RegistrarCronon GmbH
Registrar IANA ID141
RegisteredJan 9, 2018
ExpiresJan 9, 2027
Last updatedJan 10, 2026
RegistrantNot published (privacy or GDPR redaction)
Owner privacyUnknown (owner not published)
Nameserverskai.ns.cloudflare.commiki.ns.cloudflare.comDNS by Cloudflare

Cloudflare DNS is used by legitimate and scam sites alike, so it does not identify who runs the site.

Registrar abuse contactabuse-domains@cronon.net · +4930398020
Verified ownerNo owner has verified this domain on MalwareTips
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
IssuedOct 14, 2026 (23 days before this scan)
ExpiresJan 12, 2027 (66d)
Self-signedNo
Trusted chainYes: our check verified the issuer chain
Matches hostnameYes, for linkvertise.com

This is the certificate of linkvertise.com, the site this URL lands on. Certificate issued for linkvertise.com.

Hosting & Technology
HostingCloudflare, Inc.
Server IP104.18.1.75 · shared Cloudflare edge

A shared Cloudflare address answers for many sites, so it is not the site's own server and says nothing about who runs it. This is the address of linkvertise.com, the site this URL lands on.

Server locationUnited States (US)
Web servercloudflare
PopularityTop 200k worldwide
Technologies and payments

Analytics and ads

  • Google Tag Manager
  • Cloudflare Web Analytics

Scripts, fonts and CDNs

  • Google Fonts

Payment providers the page loads

None seen among the outside domains we saved.

Read from the first 20 outside domains the page loads and the shop platform it uses; the web server and platform rows are under Hosting & Technology. A payment script on the page does not prove the shop accepts that method at checkout, or that you are protected.

Redirect Chain

Hops
1
Cross-domain
Yes
Lookalike
No
Punycode
No
  • 1302https://direct-link.net/1357282/I7Eb0vUv1wtb
  • 2200https://linkvertise.com/1357282/I7Eb0vUv1wtbcross-domain

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

05 · Evidence Ledger

Evidence ledger

  1. Antiviruscomplete
  2. Browser threat feedcomplete
  3. Page contentcomplete
  4. Analysiscomplete
  5. Visual evidencecomplete
Completed analysis

The conclusion is supported by the evidence saved with this report.

Technical threat

suspicious

Malware, phishing, credential theft and hostile infrastructure.

1 independent antivirus family reported an adverse result.

Operator / customer risk

suspicious

Complaints, withdrawals, business conduct and commercial traps.

The page automatically sent the browser to an unrelated external site. · The page redirected the browser to an unrelated external domain.

Source coverage and freshness

Status shows whether usable evidence was saved; finding shows what that evidence observed.

Antivirus
Result2 of 93 engines flagged
CompletionCompletedFindingAdverse
Freshnessfresh · analysed Nov 7, 2026
Browser protection
ResultNo browser threat-list match
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Nov 7, 2026
Page content
ResultPage fetched · HTTP 200
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Nov 7, 2026
Visual evidence
Result1 visible observation saved with the page capture
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Nov 7, 2026
Independent research
Result2 independent findings were saved
CompletionCompletedFindingNo adverse finding
Freshnessthis scan · Nov 7, 2026

06 · Your Next Move

Your next move

Aggressive ads and redirects

Observed behavior includes unrelated pop-ups or redirects, notification prompts, or deceptive download controls. These are the primary risk unless the evidence separately proves a more serious mechanism.

  1. Treat direct-link.net as unverified

    Do not enter credentials or send money until you have independently verified the business.

  2. Close unexpected tabs and deny notification requests

    Do not follow an unrelated landing page, click "Allow notifications", or install a player, codec, browser extension, or update offered through an advert.

  3. If you clicked "Allow", turn the notifications back off

    Open your browser's Site Settings → Notifications, find the site, and set it to Block (or remove it). That stops the spam pop-ups it now pushes to your desktop.

  4. Remove anything installed through an advert

    Uninstall any browser extension, player, codec, or app added because of a pop-up, then run a reputable adware and malware scan. Do not call support numbers shown by unrelated landing pages.

    Open

07 · Safety FAQ

Safety FAQ

Answered from the saved verdict and evidence in this report.

Is direct-link.net a scam or is it safe?
There isn't enough evidence yet for us to give direct-link.net a confident verdict, so treat it with caution. The domain is 8 years old. Until it can be independently verified, don't enter passwords, card details, or send money, and confirm the company through channels you find yourself rather than links on the site.
Is direct-link.net safe to use?
direct-link.net has a Safety Score of 58/100 (Moderate Risk). Analysis coverage is complete at 100%. Do not trust blindly; the evidence is inconclusive.
Has direct-link.net been flagged by antivirus engines?
Yes. 2 of 93 antivirus and blocklist engines in our malware network flagged direct-link.net, 1 of them as outright malicious. None of these detections came from the engines we treat as highest-confidence, so they are weighed alongside the other checks rather than on their own.
Is direct-link.net on any phishing or malware blacklists?
No — direct-link.net is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.
How old is the direct-link.net domain?
direct-link.net is 8 years old, registered on January 9, 2018 through Cronon GmbH. A multi-year registration history is one of the stronger signals against a scam, though it's never a guarantee on its own — established domains can still be misused.
Does direct-link.net have a valid SSL certificate?
Yes — direct-link.net presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, valid for another 66 days. A certificate only encrypts the connection; it does not show who runs the site.
Where is direct-link.net hosted?
direct-link.net resolves to an IP operated by Cloudflare, Inc. in US (Content Delivery Network). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.
How often is the direct-link.net report updated?
This report is a record of the scan run on November 7, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about direct-link.net has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.

08 · Final Verdict

Final verdict

The saved conclusion, decisive evidence, and practical action in one final view.
Verdict score
58/100
Moderate Risk

direct-link.net is a Linkvertise redirect gateway that pushes visitors through ad-gated "Get link" steps to reach someone else's content

Saved capturedirect-link.netCapture-safe
Captured during this scan. Opening this report does not revisit the site.
Conclusion

The address you were given is not a shop, a login page or a download host. It is a short-link gateway: opening it immediately forwards the browser to linkvertise.com with the same link ID, where the visitor is asked to click through advertising steps before a final destination is revealed. The domain itself is old (over eight years) and sits behind a clean hosting IP, and the encrypted connection and Safe Browsing checks came back clean, but one antivirus family does flag the address and the whole purpose of the page is to monetise your click through ads. That combination puts it in the moderate-risk band rather than the safe one.

Recommended actionIf you already know and trust the person who sent you this link, expect a few advertising steps and close any pop-up or installer prompt that is not the file you came for. If the link arrived unsolicited, in a comment, or as part of a "free download" offer, skip it — the destination is chosen by the link creator, not by this domain, and you have no way to see where it ends up before you click through.
Saved evidence only

Missing checks are never treated as a clean result.

Scan another URL
Continue toCommunity

09 · Community

Community

Are you the owner of direct-link.net?Verify and reply