Is madeforthis.s-ed1.cloud.gcore.lu a scam?

Our automated security review flags madeforthis.s-ed1.cloud.gcore.lu as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.

Is madeforthis.s-ed1.cloud.gcore.lu safe to use?

No — madeforthis.s-ed1.cloud.gcore.lu scored 1/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.

Does madeforthis.s-ed1.cloud.gcore.lu have a valid SSL certificate?

Yes. madeforthis.s-ed1.cloud.gcore.lu presents a valid TLSv1.2 certificate issued by DigiCert Inc · DigiCert Global G3 TLS ECC SHA384 2020 CA1, expiring in 177 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.

Has madeforthis.s-ed1.cloud.gcore.lu been flagged by antivirus engines?

5 out of 92 antivirus engines in our malware network flagged madeforthis.s-ed1.cloud.gcore.lu as malicious or suspicious (3 outright malicious). Even one detection is a meaningful signal.

Is madeforthis.s-ed1.cloud.gcore.lu on any phishing or malware blacklists?

No. madeforthis.s-ed1.cloud.gcore.lu is not currently listed on the major browser blocklist feeds that modern browsers use.

Where is madeforthis.s-ed1.cloud.gcore.lu hosted?

madeforthis.s-ed1.cloud.gcore.lu resolves to an IP operated by G-Core Labs S.A. in LU (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.

How often is the madeforthis.s-ed1.cloud.gcore.lu report updated?

This is a permanent record of the scan run on June 12, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around madeforthis.s-ed1.cloud.gcore.lu have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Security Review

Is madeforthis.s-ed1.cloud.gcore.lu legit or a scam?

Our verdict:Dangerous· 1/100

SafeSuspiciousDangerous

Malicious phishing subdomain hosted on abused Gcore infrastructure; flagged by multiple antivirus engines and sandbox analyses.

Top reasons

Malwarebytes blocks the parent subdomain s-ed1.cloud.gcore.lu as riskware infrastructure.Five antivirus engines flag the domain or related paths as phishing or malicious (alphaMountain.ai, Fortinet, Webroot, ESET, URLQuery).Multiple sandbox analyses (JoeSandbox, ANY.RUN) confirm phishing and malware delivery on this subdomain cluster.

madeforthis.s-ed1.cloud.gcore.luScanned 2d ago

Post Facebook

Trust score

DANGEROUS

Heuristics 0·MT 15

Category tags

phishingmalware#Phishing#Malware#Data Harvester95% MT confidence

Technical red flags (1)

5 of 92 engines flagged

Positive signals (3)

Not on major blacklists Encrypted connection Clean server reputation

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence

5/92

Engines flagged this URL

Domain Age

—

Registration date unknown

MT Intelligence

Dangerous

Critical likelihood · 95% confidence

DANGEROUS

Critical risk detected

3 of 92 antivirus engines flag this page as malicious. Multiple independent checks — antivirus engines, browser safety blocklists, and threat databases — flagged this site. Don't enter personal information, deposit money, or download files.

Website Preview

LIVE RENDER

madeforthis.s-ed1.cloud.gcore.lu

1Page renders a raw AWS S3 XML error response with code 'NoSuchBucket', indicating the storage bucket 'madeforthis' does not exist and no website content is served

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

/ 100

Moderate visual risk

Visual red flags detected in the screenshot

The page displays an Amazon S3 'NoSuchBucket' XML error, meaning the configured storage origin is missing or misconfigured and no actual site content is reachable at this URL.

Visual risk40/100

What our vision model saw

1 signal

Page renders a raw AWS S3 XML error response with code 'NoSuchBucket', indicating the storage bucket 'madeforthis' does not exist and no website content is served

MT Intelligence

Advanced threat intelligence

MT Security Analyst

Critical scam likelihoodengineMT · Guardiantrust15/100

MT AgentLive web researchVisual inspectionNetwork correlation

Confidence

The subdomain s-ed1.cloud.gcore.lu is explicitly documented by Malwarebytes as riskware-associated infrastructure and appears across multiple threat-intelligence reports linked to phishing and malware delivery. Five antivirus engines and sandbox services (alphaMountain.ai, Fortinet, Webroot, ESET, URLQuery) flag the domain or related paths as phishing or malicious. The specific URL madeforthis.s-ed1.cloud.gcore.lu currently displays an AWS S3 'NoSuchBucket' error, suggesting the phishing kit or malware payload has been removed or is temporarily offline, but the subdomain itself remains part of an active threat cluster. Gcore is a legitimate Luxembourg CDN provider, but its infrastructure is routinely abused by threat actors to evade detection. No legitimate business registration, positive reviews, or lawful website content exists for this subdomain.

Full dossier

Analysis complete

Page Content

The page renders an Amazon S3 XML error response indicating the storage bucket 'madeforthis' does not exist. No website content is served; the error suggests the phishing kit or malware payload has been taken down or is misconfigured.

Infrastructure

Hosted on Gcore's Luxembourg CDN infrastructure (IP 185.145.113.132). SSL certificate is valid and issued by DigiCert, which is typical for legitimate CDN providers but does not indicate the subdomain's intent. The hosting IP has zero abuse reports and a clean reputation score, reflecting that Gcore itself is a legitimate provider; however, the subdomain is documented as part of a malicious cluster.

Domain History

WHOIS data is unavailable for this subdomain. The subdomain madeforthis.s-ed1.cloud.gcore.lu is not indexed in global traffic rankings, consistent with a temporary or ephemeral phishing/malware staging domain.

Web Reputation

Malwarebytes explicitly blocks s-ed1.cloud.gcore.lu due to riskware association. Multiple sandbox analyses (JoeSandbox, ANY.RUN) flag URLs on this subdomain cluster as phishing or malicious. Scam-Detector rates the parent subdomain with one of the lowest trust scores. No positive reviews or legitimate business registration found.

Risk Factors

Malwarebytes blocks the parent subdomain s-ed1.cloud.gcore.lu as riskware infrastructure.
Five antivirus engines flag the domain or related paths as phishing or malicious (alphaMountain.ai, Fortinet, Webroot, ESET, URLQuery).
Multiple sandbox analyses (JoeSandbox, ANY.RUN) confirm phishing and malware delivery on this subdomain cluster.
Threat intelligence reports link s-ed1.cloud.gcore.lu to malware distribution campaigns (SwimSnake/Silver Fox gang delivering RATs).
Current page serves an AWS S3 error, indicating the phishing kit or payload is offline but the infrastructure remains active.
No legitimate business registration, contact details, or lawful website content found.
Scam-Detector assigns one of the lowest trust scores to the parent subdomain.

Positive Signals

SSL certificate is valid and issued by a trusted CA (DigiCert).
Hosting IP has zero abuse reports and a clean reputation score.
Gcore itself is a legitimate Luxembourg-based CDN and cloud provider.

AI Recommendation

Do not visit this URL or enter any credentials or payment information. If you arrived here via email, link, or advertisement, report it to the relevant platform or authority. Block this domain in your browser or security software.

Scam network detected

3 linked domains correlated

The subdomain madeforthis.s-ed1.cloud.gcore.lu is part of a documented malicious cluster on s-ed1.cloud.gcore.lu. Related subdomains (esignature.s-ed1.cloud.gcore.lu, xls.s-ed1.cloud.gcore.lu) are flagged in sandbox reports as phishing and malware delivery infrastructure. Gcore is a legitimate provider, but this specific subdomain cluster is abused by threat actors for phishing kits and malware ho

s-ed1.cloud.gcore.luesignature.s-ed1.cloud.gcore.luxls.s-ed1.cloud.gcore.lu

Next-gen fraud intelligence

Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for madeforthis.s-ed1.cloud.gcore.lu, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration

No public record found

Could not match the site to a registered company — common for small sites.

Clone check

Not a clone

No well-known site's layout or branding detected here.

Typosquat check

No look-alike match

The domain doesn't resemble any well-known brand's spelling.

Web mentions

5 scam reports

Key findings

7 headline facts from open-web research

Malwarebytes explicitly blocks s-ed1.cloud.gcore.lu due to association with riskware; notes that cloud.gcore.lu subdomains are abused to host malicious scripts.
Multiple sandbox analyses (JoeSandbox, ANY.RUN) flag URLs on s-ed1.cloud.gcore.lu and similar subdomains as phishing or malicious.
The specific subdomain madeforthis.s-ed1.cloud.gcore.lu appears in URLQuery reports linked to /xls/review-file.html, a path pattern seen in other flagged phishing/malware scans on the same cluster.
Antiy and other threat reports link s-ed1.cloud.gcore.lu to malware distribution campaigns (e.g., SwimSnake/Silver Fox gang delivering RATs via fake software).
Gcore is a legitimate Luxembourg-based cloud and CDN provider, but its infrastructure is frequently abused by threat actors for phishing kits and malware hosting.
The domain has a very low trust rating on Scam-Detector and appears on blocklists and threat intelligence feeds.
No positive reviews, business details, or legitimate website content found for madeforthis.s-ed1.cloud.gcore.lu.

Scam reports (5)

Direct quotes from public scam databases, forums, and news.

Malwarebytesopen
"Malwarebytes blocks the subdomain s-ed1.cloud.gcore.lu because it is associated with riskware."
Scam-Detectoropen
"With one of the lowest trust scores on our chart, it's not likely. We put to work 53 powerful factors to expose high-risk..."
JoeSandboxopen
"AI detected malicious page (phishing or scam ). s-ed1.cloud.gcore.lu //pdf/reader/pdf2026.html"
ANY.RUNopen
"Online sandbox report for https://esignature.s-ed1.cloud.gcore.lu/... tagged as phishing, verdict: Malicious"
ANY.RUNopen
"MALICIOUS. Phishing has been detected. https://xls.s-ed1.cloud.gcore.lu/xcel/"

Research summary

Narrative write-up from our AI analyst, grounded on the facts above

Malwarebytes explicitly blocks s-ed1.cloud.gcore.lu due to association with riskware and notes that cloud.gcore.lu subdomains are abused to host malicious scripts. Multiple sandbox analyses (JoeSandbox, ANY.RUN) flag URLs on s-ed1.cloud.gcore.lu and related subdomains as phishing or malicious. Threat intelligence reports link the subdomain cluster to malware distribution campaigns, including SwimSnake/Silver Fox gang delivering remote-access trojans via fake software. Scam-Detector rates the parent subdomain with one of the lowest trust scores on its platform. No positive reviews, business registration, or legitimate website content found for madeforthis.s-ed1.cloud.gcore.lu.

Antivirus Engines

Detection matrix · live

5 engines flagged this URL

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. Each detection is listed below by engine name — even a single hit is a meaningful signal.

3Malicious2Suspicious56Harmless92Engines

of 92

alphaMountain.ai

Malicious· phishing

Fortinet

Malicious· phishing

Webroot

Malicious· malicious

ESET

Suspicious· suspicious

URLQuery

Suspicious· suspicious

5 antivirus engines flagged this URL. Even a single detection is a meaningful signal — treat this site with extra caution and avoid entering credentials, payment info, or downloading any files.

Security Scans

Blacklist Check

Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Encryption Certificate

StatusValid

ProtocolTLSv1.2

IssuerDigiCert Inc · DigiCert Global G3 TLS ECC SHA384 2020 CA1

ExpiresDec 6, 2026 (177d)

Self-signedNo

Hosting & Technology

HostingG-Core Labs S.A.

Server locationLU

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPG-Core Labs S.A.

Usage typeData Center/Web Hosting/Transit

Avoid this site

Our automated review flagged enough risk that you should treat this site as unverified.

Do not interact with madeforthis.s-ed1.cloud.gcore.lu
Do not enter credentials, deposit money, download files, or install browser extensions from this site.
Verify the business through independent channels
Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.
Never use irreversible payment methods
Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.
Share your experience
If you have additional context, drop a comment below or post on the MalwareTips forum.
Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

ListedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

Our automated security review flags madeforthis.s-ed1.cloud.gcore.lu as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
No — madeforthis.s-ed1.cloud.gcore.lu scored 1/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
Yes. madeforthis.s-ed1.cloud.gcore.lu presents a valid TLSv1.2 certificate issued by DigiCert Inc · DigiCert Global G3 TLS ECC SHA384 2020 CA1, expiring in 177 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
5 out of 92 antivirus engines in our malware network flagged madeforthis.s-ed1.cloud.gcore.lu as malicious or suspicious (3 outright malicious). Even one detection is a meaningful signal.
No. madeforthis.s-ed1.cloud.gcore.lu is not currently listed on the major browser blocklist feeds that modern browsers use.
madeforthis.s-ed1.cloud.gcore.lu resolves to an IP operated by G-Core Labs S.A. in LU (usage type: Data Center/Web Hosting/Transit). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
This is a permanent record of the scan run on June 12, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around madeforthis.s-ed1.cloud.gcore.lu have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

Trust / 100

Final Verdict·madeforthis.s-ed1.cloud.gcore.lu

DANGEROUS

This subdomain is part of a known malicious infrastructure cluster used to host phishing kits and malware. Multiple threat-detection services flag it as phishing, and the current URL serves an AWS S3 error page rather than legitimate content.

AV engines

MT passes

Net signals

Scan another URL

Security review completemalwaretips.com/url-scan

Recently scanned

Other Dangerous reports

pgeqd.spectrumdigest.study

thepronailcomplex.com

38m ago

Read the review

Dangeroustrust38

thebillionairebrainwave.com

Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…

Loading comments…

This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.