Security Review

Is dl.modfyp.mobi legit or a scam?

Our verdict:Dangerous· 1/100

A malicious mobile download portal flagged by eight security engines for distributing malware and infected application files.

dl.modfyp.mobiScanned 1h ago
0
Trust score
DANGEROUS
Heuristics 0·MT 18
Category tags
malware#malware#cracked app90% MT confidence
Technical red flags (1)
Warning signals (1)

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
10/92
Engines flagged this URL
Domain Age
3 years old
Registered Oct 24, 2023
MT Intelligence
Dangerous
High likelihood · 90% confidence
DANGEROUS

Critical risk detected

10 of 92 antivirus engines flag this page (8 outright malicious). Multiple independent checks — antivirus engines, browser safety blocklists, and threat databases — flagged this site. Don't enter personal information, deposit money, or download files.

Website Preview

Screenshot of dl.modfyp.mobi
LIVE RENDER
dl.modfyp.mobi

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
High scam likelihoodengineMT · Guardiantrust18/100
MT AgentLive web researchVisual inspection
0%
Confidence
Our analysis identified significant threats associated with this subdomain. Eight major antivirus engines, including BitDefender, Fortinet, and G-Data, have explicitly flagged the site for hosting malware. While the primary domain has existed for over two years, this specific 'dl' (download) subdomain is used to serve files that trigger high-severity security alerts. The lack of a global traffic rank suggests it operates as a targeted delivery vector rather than a legitimate app store. We have high confidence that files hosted here are designed to compromise mobile devices.
Full dossier
Analysis complete

Page Content

The site functions as a download server for mobile applications, specifically targeting the '.mobi' mobile web space. It uses a 'dl' prefix, which is a common pattern for direct-download mirrors used by third-party app repositories.

Infrastructure

The domain is hosted behind a common content delivery network, which hides the true origin server. While the SSL certificate is valid, it was issued recently and does not provide business-level verification.

Domain History

The root domain was registered nearly three years ago via NameCheap. However, the activity on this specific subdomain is inconsistent with a reputable software distributor, as it lacks any presence in global traffic indices.

Web Reputation

The reputation is severely compromised by detections from our antivirus network. Engines such as CyRadar and ADMINUSLabs confirm the presence of malicious code, likely embedded within the 'modded' or 'cracked' apps the site offers.
Risk Factors
5
  • Eight antivirus engines (including BitDefender and Fortinet) flag the site as malicious.
  • The site distributes 'modded' apps, which are a primary vector for mobile trojans.
  • No verifiable business registration or physical address is associated with the operator.
  • The subdomain lacks a global traffic ranking, typical of ephemeral malware mirrors.
  • The site uses a privacy-protected registration to hide the identity of the owners.
Positive Signals
2
  • The domain has been registered for over 900 days.
  • The site uses a valid SSL certificate from a recognized issuer.
AI Recommendation
Do not download or install any files from this site. If you have already downloaded an APK from this domain, delete it immediately and run a full scan with a trusted mobile security app.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for dl.modfyp.mobi, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
2.7 yrs
Registered Oct 2023
Web mentions
No scam reports found
No complaints, no negative coverage turned up in our sweep.
Research summary
Narrative write-up from our AI analyst

No specific consumer reviews or scam reports were found in our research, which is common for direct-download subdomains that bypass traditional review platforms.

Antivirus Engines

Detection matrix · live
10 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

8Malicious2Suspicious51Harmless92Engines
0
of 92
ADMINUSLabs
Malicious· malicious
alphaMountain.ai
Malicious· malicious
BitDefender
Malicious· malware
CyRadar
Malicious· malware
Fortinet
Malicious· malware
G-Data
Malicious· malware
Lionic
Malicious· malware
Sophos
Malicious· malware
Forcepoint ThreatSeeker
Suspicious· suspicious
Gridinsoft
Suspicious· suspicious

10 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Domain History
Age3 years old
RegistrarNameCheap, Inc.
RegisteredOct 24, 2023
ExpiresOct 24, 2026
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresSep 6, 2026 (67d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS

Redirect Chain

Hops
1
Cross-domain
Yes
Lookalike
No
Punycode
No
  • 1301http://dl.modfyp.mobi/
  • 2404https://dl.fsharefile.com/cross-domain

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Avoid this site

Our automated review flagged enough risk that you should treat this site as unverified.

  • Do not interact with dl.modfyp.mobi

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
ListedCheck ↗
AbuseIPDB
Not listedCheck ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review flags dl.modfyp.mobi as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
  • No — dl.modfyp.mobi scored 1/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
  • Yes. dl.modfyp.mobi presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 67 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • dl.modfyp.mobi is 2.7 years old, registered on 10/24/2023 through NameCheap, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • 10 out of 92 antivirus engines in our malware network flagged dl.modfyp.mobi as malicious or suspicious (8 outright malicious). Even one detection is a meaningful signal.
  • No. dl.modfyp.mobi is not currently listed on the major browser blocklist feeds that modern browsers use.
  • dl.modfyp.mobi resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on July 1, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around dl.modfyp.mobi have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·dl.modfyp.mobi
DANGEROUS

This site is a distribution point for malicious software disguised as mobile app downloads. Multiple security engines have flagged the domain for hosting malware, and you should avoid downloading any files from it. Do not install any APKs or apps provided by this subdomain.

Do not download or install any files from this site. If you have already downloaded an APK from this domain, delete it immediately and run a full scan with a trusted mobile security app.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.