Lost money to ww547.him.so? Warn othersLost money here? Warn othersRate it · review · follow updates

Is ww547.him.so safe?

http://ww547.him.so/

Moderate RiskStatus

Community ratingNo reviews yet · Write one

Checked on Nov 1, 2026

How we checked

Coverage: strong · 5 of 6 applicable core capabilities

Antivirus (58 of 93 engines answered): completed
Google Safe Browsing: completed
page reading · not available: did not fully complete
page capture · limited: did not fully complete
domain records: completed
web research: completed

Verdict

Inaccessible subdomain on shared infrastructure with prior malicious associations

ww547.him.so returns a 401 Forbidden error and cannot be reviewed. The parent domain him.so was registered in 2020 through Dynadot LLC, and the hosting IP has been linked to other flagged domains in external threat reports.

Do not attempt to access or interact with ww547.him.so. The 401 response prevents any content review, and the shared hosting IP carries documented malicious associations.

Read full analysis

Loading saved screenshot

Preparing the saved page preview.

Saved site captureThe site blocked our capture or showed an error page No antivirus detections across 58 engines

Calibrated safety spectrum

Where this site sits

Dangerous1–20
High Risk21–44
Moderate Risk45–69
Low Risk70–84
Safe85–100

The score combines saved evidence strength and analysis quality. Coverage is reported separately.

Score explained

Why 45/100

Moderate Risk covers scores 45–69. 1 finding pulled the score down; 2 pushed it up.

What pulled the score down

ModerateOne public warning on a scam-warning or security site: "Resolved IP 34.160.121.137 Google Cloud"-25 pts

What pushed the score up

SupportsThe registrable domain is 2440 days old (him.so, the parent domain of this subdomain host; it does not show how long the subdomain itself has existed)
SupportsZero detections on the multi-engine malware scan and no Safe Browsing warning

Points come from the saved evidence ledger: it lowered the score from 70 to 45 and split those 25 points between the findings that show points; the others carry no points in the ledger. Community reviews never change the Safety Score.

01 · Investigation Brief

Investigation Brief

Access and detection status

The site returns HTTP 401 Forbidden, so its own page content, contact details, and policies could not be reviewed.

The multi-engine malware scan shows zero malicious detections across 93 engines for this subdomain, and the browser threat feed returned no threat warning.

Hosting and external associations

The IP address 34.160.121.137 is hosted on Google Cloud and has been linked to other domains flagged for malicious activity in external reports.

The parent domain him.so was registered in 2020 through Dynadot LLC, providing a moderate age baseline for the infrastructure.

Why the score is 45

One public warning on a scam-warning or security site: "Resolved IP 34.160.121.137 Google Cloud". Coverage remains separate so missing sources cannot be mistaken for clean results.

02 · Security Evidence

Security evidence

Collected signals and independent provider data for this URL.

Antivirus Engines

0/ 93

No detections

Fresh result

No detections across 58 engines that rated this URL

No antivirus engine that answered raised an adverse result; 35 had no rating for this URL. This is one signal, not a guarantee.

Malicious: 0
Suspicious: 0
Total: 93

All 93 engine results

0xSI_f33d - Unrated
Abusix - Clean
Acronis - Clean
ADMINUSLabs - Clean
AILabs (MONITORAPP) - Clean
AlienVault - Clean
alphaMountain.ai - Unrated
AlphaSOC - Unrated
Antiy-AVL - Clean
ArcSight Threat Intelligence - Unrated
AutoShun - Unrated
Bfore.Ai PreCrime - Unrated
BitDefender - Clean
Bkav - Unrated
BlockList - Clean
Blueliv - Clean
Certego - Clean
ChainPatrol - Unrated
Chong Lua Dao - Clean
CINS Army - Clean
CRDF - Clean
Criminal IP - Unrated
CSIS Security Group - Unrated
CTX AI - Clean
Cyan - Unrated
Cyble - Clean
CyRadar - Clean
desenmascara.me - Clean
DNS8 - Unrated
Dr.Web - Clean
EmergingThreats - Clean
Emsisoft - Clean
Ermes - Unrated
ESET - Clean
ESTsecurity - Clean
Forcepoint ThreatSeeker - Clean
Fortinet - Clean
Fortra - Unrated
G-Data - Clean
GCP Abuse Intelligence - Unrated
Google Safe Browsing - Clean
GreenSnow - Clean
GreyNoise - Unrated
Gridinsoft - Unrated
Guardpot - Unrated
Heimdal Security - Clean
Hunt.io Intelligence - Unrated
IPsum - Clean
Juniper Networks - Clean
K7AntiVirus - Unrated
Kaspersky - Clean
LevelBlue - Clean
Lionic - Clean
Lumu - Unrated
Malwared - Clean
MalwarePatrol - Clean
MalwareURL - Unrated
Mimecast - Unrated
Netcraft - Unrated
OpenPhish - Clean
Orcapot - Unrated
PhishFort - Unrated
Phishing Database - Clean
Phishtank - Clean
PREBYTES - Clean
PrecisionSec - Unrated
Quick Heal - Clean
Quttera - Clean
Rising - Clean
SafeToOpen - Unrated
Sangfor - Clean
Sansec eComscan - Unrated
Scantitan - Clean
SCUMWARE.org - Clean
Seclookup - Clean
Snort IP sample list - Unrated
SOCRadar - Unrated
Sophos - Clean
StopForumSpam - Clean
Sucuri SiteCheck - Clean
Synthient - Unrated
ThreatHive - Clean
URLhaus - Clean
URLQuery - Unrated
Viettel Threat Intelligence - Clean
VIPRE - Unrated
ViriBack - Clean
VX Vault - Clean
Webroot - Clean
Xcitium Verdict Cloud - Clean
Yandex Safebrowsing - Clean
ZeroCERT - Clean
ZeroFox - Unrated

How security vendors categorise this site

Forcepoint ThreatSeekeradvertisements
Googledomain_parking

Each vendor’s own label for the site, saved with the antivirus result. Labels are separate from the engine verdicts above and can disagree with each other.

Security Scans

Browser Threat Feed

Not flagged on major threat lists

Checked against the browser threat feeds available to this scan — no hit.

What we observed

Loading saved screenshot

Preparing the saved page preview.

CAPTURED PAGE

ww547.him.so

What our review noticed on this page

1Forbidden

Visual analysis

Visual context from the captured page

Forbidden

Context only

What the captured page showed

1 observation

01
Forbidden

03 · Investigation Story

Investigation story

The behavior, reputation, and operator evidence that explains how this site may affect a visitor.

What the site claims
No page claim could be verified for ww547.him.so because no usable page content or saved capture was available.
What we observed
The page itself could not be fully inspected, so the report relies on the other saved checks.
What independent research found
2 external findings were saved and compared with the page evidence.
What remains unverified
1 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.

Web research findings

Independent findings for ww547.him.so, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.

Business registration

Not checked

This report did not include a company-registry lookup, so no registration result is claimed.

Clone check

Not checked

No site-clone comparison was run for this report, so no clean result is claimed.

Typosquat check

Not checked

No look-alike domain comparison was run for this report, so no clean result is claimed.

Web mentions

1 complaint or warning

Complaints and warnings (1)

Direct quotes from public complaints, negative reviews, warnings and security listings.

PhishDestroyopen
"Resolved IP 34.160.121.137 Google Cloud"

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing

Not listedCheck ↗

VirusTotal

Not listedCheck ↗

AbuseIPDB

Not listedCheck ↗

Also verify:Spamhaus ↗DNSBL / SURBL ↗PhishTank ↗

04 · Domain & Infrastructure

Domain & infrastructure

Timeline · identity · encryption · redirects · hosting

The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.

Infrastructure map

How the saved page connected to the wider web.

Domainww547.him.so
Redirects toww547.him.so
Hosted byGoogle LLC

Domain Timeline

Feb 26, 2020
Domain registered
First appeared in WHOIS records — 6 years old when this review was saved.
Nov 1, 2026
Saved security review — Rated Moderate Risk
The evidence in this saved scan is mixed or incomplete; the completed checks are detailed above.

Domain & Encryption

Domain History

Age6 years old

RegistrarUnknown

RegisteredFeb 26, 2020

ExpiresUnknown

RegistrantNot in the record we could read

Owner privacyUnknown

Verified ownerNo owner has verified this domain on MalwareTips

Encryption Certificate

StatusInvalid

Protocolnone

IssuerNone

ExpiresNot applicable

Self-signedNo

Hosting & Technology

HostingGoogle LLC

Server IP34.160.121.137 · shared CDN edge

A shared content-delivery network address answers for many sites, so it is not the site's own server and says nothing about who runs it.

Server locationUnited States (US)

PopularityRadar ranks him.so, not this subdomain

Server Reputation

Abuse Intelligence

Confidence score0%

Reports on file0

ISPGoogle LLC

Usage typeContent Delivery Network

05 · Evidence Ledger

Evidence ledger

Coverage, provenance, and source freshness remain separate so a missing check is never mistaken for a clean result.

Antiviruscomplete
Browser threat feedcomplete
Page contentunavailable
Analysiscomplete
Visual evidencepartial

Completed analysis

The conclusion is supported by the evidence saved with this report.

Technical threat

unknown

Malware, phishing, credential theft and hostile infrastructure.

No confirmed evidence in this dimension.

Operator / customer risk

suspicious

Complaints, withdrawals, business conduct and commercial traps.

One public warning on a scam-warning or security site: "Resolved IP 34.160.121.137 Google Cloud"

Source coverage and freshness

Status shows whether usable evidence was saved; finding shows what that evidence observed.

Source coverage
Source	Result	Completion	Finding	Freshness
Antivirus	0 of 93 engines flagged	Completed	No adverse finding	fresh · analysed Nov 1, 2026
Browser protection	No browser threat-list match	Completed	No adverse finding	this scan · Nov 1, 2026
Page content	Page content was not available for semantic review	Unavailable	No saved finding	Not available
Visual evidence	The site blocked our capture or showed an error page; 1 visible observation saved	Limited	No saved finding	this scan · Nov 1, 2026
Independent research	2 independent findings were saved	Completed	Adverse	this scan · Nov 1, 2026

Antivirus: Result0 of 93 engines flagged; CompletionCompletedFindingNo adverse finding; Freshnessfresh · analysed Nov 1, 2026
Browser protection: ResultNo browser threat-list match; CompletionCompletedFindingNo adverse finding; Freshnessthis scan · Nov 1, 2026
Page content: ResultPage content was not available for semantic review; CompletionUnavailableFindingNo saved finding; FreshnessNot available
Visual evidence: ResultThe site blocked our capture or showed an error page; 1 visible observation saved; CompletionLimitedFindingNo saved finding; Freshnessthis scan · Nov 1, 2026
Independent research: Result2 independent findings were saved; CompletionCompletedFindingAdverse; Freshnessthis scan · Nov 1, 2026

06 · Your Next Move

Your next move

Proceed with caution

The evidence is mixed or incomplete, so treat this site as unverified until you can confirm who runs it.

Analyst recommendation
Do not attempt to access or interact with ww547.him.so. The 401 response prevents any content review, and the shared hosting IP carries documented malicious associations.
Treat ww547.him.so as unverified
Do not enter credentials or send money until you have independently verified the business.
Verify the business through independent channels
Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.
Never use irreversible payment methods
Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.
Share your experience
If you have additional context, drop a comment below or post on the MalwareTips forum.
Open

07 · Safety FAQ

Safety FAQ

Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.

Is ww547.him.so a scam or is it safe?

There isn't enough evidence yet for us to give ww547.him.so a confident verdict, so treat it with caution. The parent domain him.so is 6 years old. Until it can be independently verified, don't enter passwords, card details, or send money, and confirm the company through channels you find yourself rather than links on the site.

Is ww547.him.so safe to use?

ww547.him.so has a Safety Score of 45/100 (Moderate Risk). Analysis coverage is strong at 77%. Do not trust blindly; analysis may be limited.

Has ww547.him.so been flagged by antivirus engines?

No — all 58 antivirus and blocklist engines in our malware network that rated it report ww547.him.so as clean. 35 other engines had no rating for it. That's a good sign, though antivirus coverage is only one of the many signals we weigh, and brand-new scam sites can appear clean before vendors catch up.

Is ww547.him.so on any phishing or malware blacklists?

No — ww547.him.so is not currently on the major browser blocklist feeds that Chrome, Safari, Firefox, and Edge rely on. Note that blocklists can lag behind brand-new scam domains, so "not listed" is reassuring but not a guarantee on its own.

How old is the ww547.him.so domain?

ww547.him.so is a subdomain of him.so, which is 6 years old, registered on February 26, 2020. That is the parent domain's registration age: it does not show how long ww547.him.so itself has existed or who runs it, so it is weighed alongside the other checks.

Does ww547.him.so have a valid SSL certificate?

No — ww547.him.so has an invalid or broken SSL certificate, so browsers will show a security warning. Combined with the other signals, we recommend avoiding it.

Where is ww547.him.so hosted?

ww547.him.so resolves to an IP operated by Google LLC in US (Content Delivery Network). Hosting location alone doesn't make a site good or bad — but hosting that doesn't match a brand's claimed country, or that sits on networks known for abuse, is one of the many signals we weigh alongside the verdict above.

How often is the ww547.him.so report updated?

This report is a record of the scan run on November 1, 2026, and the verdict reflects that point in time. Scam sites change fast — they can go live, get flagged, or vanish within days — so if you believe something about ww547.him.so has changed, MalwareTips staff can run a fresh scan that re-checks every signal from scratch and republishes an updated verdict.

08 · Final Verdict

Final verdict

The saved conclusion, decisive evidence, and practical action in one final view.

Verdict score

45/100

Moderate Risk

Inaccessible subdomain on shared infrastructure with prior malicious associations

The site blocked our capture or showed an error page. Opening this report does not revisit the site.

Conclusion

Recommended actionDo not attempt to access or interact with ww547.him.so. The 401 response prevents any content review, and the shared hosting IP carries documented malicious associations.

Continue toCommunity

09 · Community

Community

First-hand experiences add human context after the scanner has reached its conclusion.

Are you the owner of ww547.him.so?Verify and reply

Is ww547.him.so safe?

How we checked

Inaccessible subdomain on shared infrastructure with prior malicious associations

What pulled the score down

What pushed the score up

Access and detection status

Hosting and external associations

Why the score is 45

What the captured page showed

What the site claims

What we observed

What independent research found

What remains unverified

Technical threat

Operator / customer risk

Proceed with caution

Analyst recommendation

Treat ww547.him.so as unverified

Verify the business through independent channels

Never use irreversible payment methods

Share your experience

Inaccessible subdomain on shared infrastructure with prior malicious associations

More reports in this category