Is get.activated.win Safe? Full Safety Report

Suspicious 185.199.111.153 En ligne
Last checked 1 hour, 49 minutes ago · Oct 12, 2026 7:03 AM UTC · First scanned Oct 12, 2026
Mature domain SSL valid Suspicious Malicious WHOIS hidden
0 Risk Score

Suspicious

Domain Age 880 days
Headers Grade F security
SSL Certificate Valid certificate
VT Score 0/0 engines
Blacklists 1 flagged
Wayback 165 snapshots

This site has been flagged as Suspicious

Have you been scammed by this site? Report it to help protect others.

Collective Action

Join other victims to file a collective complaint against this domain. The more people join, the stronger the case. Your information is kept confidential and only shared with authorities if the action is formally submitted.

0
participants
0 €
total reported losses
0/5
threshold
Screenshot of get.activated.win — Suspicious website captured on October 12, 2026

Screenshot captured by ScamSandbox — click to enlarge

Server Location
Location
Francisco, United States
IP
185.199.111.153
Hosting
Fastly, Inc.
Share: Twitter Facebook LinkedIn
Certified Report JSON CSV
Is this site safe?

Avoid this site. There are multiple red flags suggesting it may be fraudulent.

The domain owner uses WHOIS privacy protection, hiding their identity. 1 security engine(s) on VirusTotal flag this site. No privacy policy or terms of service found. The site has poor security headers (grade F).

• Domain Age: 2.4 years ✗ WHOIS Privacy: Owner identity hidden • Registrar: NAMECHEAP INC ✓ SSL Certificate: Valid, expires in 78 days ✗ VirusTotal: 1/93 engines flag ✗ Legal Pages: No privacy policy or terms ✗ Security Headers: Grade F ✓ Web Archive: 165 snapshots
Found on 1 blacklist
+15
No email server (MX record)
+5
Missing SPF or DMARC
+5
Recent Let's Encrypt certificate
+5
Flagged by 1-3 antivirus engines
+20
Poor security headers
+5
No privacy policy
+5
Mature domain (1+ year)
-5
1 time scanned on ScamSandbox

Correlated domains

These domains share multiple infrastructure or registration signals with this domain — a pattern common in coordinated scam networks.

activated.win 2024-05-1…
Same Registrar Created same period Same NS VT Sibling
cgit.activated.win 2024-05-1…
Same Registrar Created same period Same NS VT Sibling
delivery.activated.win 2024-05-1…
Same Registrar Created same period Same NS VT Sibling
drive.activated.win 2024-05-1…
Same Registrar Created same period Same NS VT Sibling
f334bdf0-us02.activated.win 2024-05-1…
Same Registrar Created same period Same NS VT Sibling
fix-tls.activated.win 2024-05-1…
Created same period Same NS VT Sibling
git.activated.win 2024-05-1…
Created same period Same NS VT Sibling
mail.activated.win 2024-05-1…
Created same period Same NS VT Sibling
updatecheck30.activated.win 2024-05-1…
Created same period Same NS VT Sibling
updatecheck31.activated.win 2024-05-1…
Created same period Same NS VT Sibling
updatecheck310.activated.win 2024-05-1…
Created same period Same NS VT Sibling
updatecheck311.activated.win 2024-05-1…
Created same period Same NS VT Sibling
updatecheck312.activated.win 2024-05-1…
Created same period Same NS VT Sibling
updatecheck32.activated.win 2024-05-1…
Created same period Same NS VT Sibling
updatecheck33.activated.win 2024-05-1…
Created same period Same NS VT Sibling
updatecheck34.activated.win 2024-05-1…
Created same period Same NS VT Sibling
updatecheck35.activated.win 2024-05-1…
Created same period Same NS VT Sibling
updatecheck36.activated.win 2024-05-1…
Created same period Same NS VT Sibling
updatecheck37.activated.win 2024-05-1…
Created same period Same NS VT Sibling
updatecheck38.activated.win 2024-05-1…
Created same period Same NS VT Sibling

Domain Timeline

Info Warning Critical 6 events
May 15, 2024 Today
Domain Created

Domain get.activated.win was registered.

WHOIS
Domain Updated

Domain get.activated.win WHOIS record was updated.

WHOIS
SSL Certificate Issued

SSL certificate issued by Let's Encrypt.

SSL Check
Flagged by VirusTotal

Flagged by 1 engines as malicious and 3 as suspicious on VirusTotal.

VirusTotal
SSL Certificate Expires

SSL certificate will expire.

SSL Check
Domain Expires

Domain get.activated.win is set to expire.

WHOIS
Domain Age
880 days old - Established domain
WHOIS Privacy
Registration details are hidden behind privacy protection
Email Security
No SPF or DMARC records found
Typosquatting
No typosquatting detected
Contact Info
Contact information found
Privacy Policy
No privacy policy detected
Redirects
1 redirect
Security Headers
F Grade
Security Score 0%
referrer_policy Not set
x_frame_options Not set
x_xss_protection Not set
permissions_policy Not set
x_content_type_options Not set
content_security_policy Not set
strict_transport_security Not set
cross_origin_opener_policy Not set
Missing: Strict-Transport-Security, Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, X-XSS-Protection, Cross-Origin-Opener-Policy
Server: GitHub.com
SSL Certificate
Issuer Let's Encrypt
Valid From N/A
Valid Until N/A
Days Until Expiry 78 days
Subject Alternative Names
get.activated.win
Redirect Chain
https://get.activated.win
Content Analysis

Trust Signals

✓ Contact ✗ Social ✗ Privacy Policy ✗ Terms

Threat Signals

— Login Form — Payment Form Urgency: 0 — Hidden Elements — Iframes
Domain Mindmap
get.activated.win
DNS
A: 185.199.111.153A: 185.199.109.153A: 185.199.110.153A: 185.199.108.153
Server
GitHub.com CDN: Fastly
Technologies
None detected
Ports
80 (HTTP) 443 (HTTPS)
Related
255 domains Fastly, Inc. Shared Hosting
Shared IP
0--0--1.com 0--0.net 0--0.xyz 0--key.github.io 0-0-256.github.io 0-001-0.github.io 0-1-0-1.github.io 0-1.gg +243 more
SSL Linked
fallback.tls.fastly.net github.com github.io githubassets.com githubstatus.com githubusercontent.com

Domain Relationships

Sources: Shodan · urlscan.io · PTR scan (/24) · SSL certificate grab · ipapi.co · HackerTarget Reverse IP · DNS PTR · RapidDNS

PTR: cdn-185-199-111-153.github.com Fastly, Inc. ⚠ Shared Hosting
fallback.tls.fastly.net github.com github.io githubassets.com githubstatus.com githubusercontent.com
0--0--1.com 0--0.net 0--0.xyz 0--key.github.io 0-0-256.github.io 0-001-0.github.io 0-1-0-1.github.io 0-1.gg 0-143.siteleaf.net 0-14n.github.io 0-1d.com 0-2-0.v.mmcesim.org 0-chan.github.io 0-co.github.io 0-daniel-0.github.io 0-danielviktorovich-0.github.io 0-experiments.github.io 0-fog.github.io 0-harshit-0.github.io 0-jagadeesh-0.github.io 0-k.github.io 0-l.github.io 0-lucas.github.io 0-oo.github.io 0-oo2.github.io 0-range.github.io 0-s-0.github.io 0-sv.github.io 0-th.com 0-th.github.io 0-tikaro.github.io 0-to-1.github.io 0-tools.com 0-ye.github.io 0.083810000.xyz 0.0im.cn 0.30000000000000004.com 0.6180340.xyz 0.awa.cloud-ip.cc 0.crimson-perch.github.io 0.dontkillmyapp.com 0.estefanymartinez.lat 0.eyeoko.com 0.ghfxj.com 0.github.io 0.hs.vc 0.is-a.dev 0.nya.je 0.skyrelics.com 0.soon.it 11mins.github.io 503806391.xyz 5m0crnsp0a.nusantaravip2.pro acaimaniadelivery.com.br adityaneupane.com.np adriant.io aleks-sidorenko.github.io aleksandar-t.github.io allduid.com andreagoodmanmusic.github.io antenna-trouble110.info anwita2647-cmyk.github.io artish0k1234.github.io aryabansal1.github.io automizeflow.org belgerycollections.co.za bertabartoli.com bhooma.ai blessingsparkling.shop blinovartem.github.io blue-tomato.github.io brycematheson.com casualwzb.github.io cdn-185-199-111-133.github.com cdn-185-199-111-153.github.com cdn-185-199-111-154.github.com clickarr.net clotheshorseanonymous.com codetopixels.github.io coldgrub1384.github.io compbio.hms.harvard.edu competition-app.moya.app conr24.github.io datastructures.live diljeetsingh123.github.io drinkgoodtwin.com edu-summit.github.io edu.sigmanixtech.com elizarov.github.io emcalling.com eni202519.github.io farzher.github.io fatimasanchezstudio.com fewwwww.github.io finmat.rs firdatuljaniah12-collab.github.io flomerboy.github.io github.com github.github.io github.io gjusth.github.io gotenberg.dev gothlab.github.io gov.patientsketch.com gwaerb100.ch harvard.edu hazratjunaid.com heli8282.github.io help.wondersystem.co hemayadlapalli4.github.io howeets.github.io iamsankalp.github.io igccst2026.com imza.run jancrs.github.io jayantidevi.com jchen-cs-github-io.pages.dev jelly.fabian-duerkop.de joshmadrid.co kalin.games khaichiong.com knobsock.net kxion.github.io learn.sapio-lang.org liqorapp.xyz mangohoutonline.nl markreddick.github.io media2027.github.io moverscostcalculator.com mta-sts.veganuary.com nasarakunovdastan-commits.github.io navimate.app niharsuthar.github.io noesblanches.github.io nzrunningstats.github.io oharab.github.io organization-teams-009.github.io osgeonl.github.io padimachi.com pay.hotmart.com paymentorder.jp pbx24lsnv3.nusantaravip2.pro pdrnl-oaaaa-aaaau-agfwa-cai.icp0.io pegaelevadelivery.com.br peterrichtarik.github.io phildrew79.github.io pieroit.github.io pjchender.github.io pjdon.github.io pkuzmin.github.io planetyoga.ca poc-static-delivery.pages.dev positive-future.github.io powerkuy.com ptoszek.pl pulsr-software.github.io putinisagayclowncom.github.io pwtemple.github.io pybcn.github.io quiethowling.shop rachelleflores.github.io raenkumi.github.io railslide.github.io raydodds.github.io rdoreilly.github.io rehknee.github.io resolami.github.io rgw3d.github.io rich-supe.github.io rihan21hash.github.io rinitasenconsulting.com robgalvinco.github.io robhorrigan.github.io rohank25.github.io rstumbaugh.github.io ruihanwei.github.io sachindeepcleaning.shop saezmisael.github.io sanderroberti.github.io sangwoohahn.github.io sapuglha.github.io satsuyaohata.github.io scadasolutions.com scalamolecule.github.io scalawithcats.github.io schmittus.github.io scorchtrail.github.io sdgdata.gov.uk sengarkuldeep-presentations.github.io serverlesscomputing.github.io sfopencity.github.io shaneiln.github.io shangyusu.github.io shanshuicloud.sbs shermanloan.github.io shilad.github.io shinnkikuchi.github.io shivaniprinters.github.io shotakarato.github.io shubhamvij.github.io siddhesh281250.github.io simonshephard.github.io sixtisam.github.io skinitrite.com sklifosovskiy-kinozal.buzz sl2021-dev.github.io slc3.github.io smhaley.github.io smirksoftware.com smithjw1.github.io suchomelova-dana.github.io superhj1987.github.io suyashchouhan.github.io szd0319.github.io tbkk.github.io testsheepnz.github.io thetradinghouracademy.live tiiy5345-hue.github.io transquip.com.au tshepomaabane.me umb-vr-ela.github.io undratraining.com via-accessories.com.ua vitamintk.github.io vnezoerp.github.io vsxl.github.io waxlimbs.com webhook.site wildaqonitat-design.github.io worldtreasuredesigns.com www.genesunknown.com www.just.ac.uk www.olivebuilder.com www.projectforge.de www.rmengineering.co.uk www.roofingcanarywharf.co.uk www.ruiyugc.cn www.secruhr.com www.singapore.dontkillmyapp.com www.teministeriet.com www.tetrycy.com.pl www.totalleecase.com www.tufts.edu xeniascripts.github.io yaldasa.github.io yislah.github.io yogendra-08.github.io youbcastorir.github.io yrwuang.github.io zenasport.com zigalah.si
WHOIS Information
Registrar NAMECHEAP INC
Created 2024-05-15T02:03:37
Expires 2027-05-15T02:03:37
Updated 2026-07-10T04:06:09
Registrant Country US
Name Servers
harleigh.ns.cloudflare.com yadiel.ns.cloudflare.com
Port Scan
80 HTTP
443 HTTPS

External Trust Scores

Average: 54.5%
9/100
Gridinsoft
9/100
Clean
PhishTank
Clean

Also check on:

2 sites checked. Scores are fetched directly from each platform.

Community Intelligence

Mixed

8 mentions found across community sources (8 neutral).

0 positive 8 neutral 0 negative

You never need an enterprise agreement. irm https://get.activated.win | iex

10LTSC + Office 2016 + open shell is the peak windows experience. 2016 was the last year you could autosave documents locally, then fucking OneDrive. Grab an ISO from Massgrave, write using Rufus and…

Step 1: https://schneegans.de/windows/unattend-generator/ Set up an unattend script how you want it to install Windows 11 Education, the only sane build of W11 with most AI…

it is in the name get.activated.win(dows)

https://get.activated.win wouldn't be online if microsoft cared.

For anyone that does not want to switch to linux LTSC is a good alternative to avoid issues like these: https://github.com/massgravel/massgrave.dev/blob/main/docs&…

irm https://get.activated.win | iex

`irm https://get.activated.win | iex` lives in my head rent-free

Sources checked: Hacker News PhishTank
Threat Intelligence Sources
VirusTotal Clean
0/0 engines
View on VirusTotal →
AbuseIPDB Flagged
35% confidence
38 reports
PhishDestroy Low Risk
0 risk score
Wayback Machine
First Seen N/A
Last Seen N/A
Total Snapshots 165
Google Index & SEO
Robots.txt Missing
Sitemap Missing
Index Score N/A

Community Reports

No community reports yet for get.activated.win. Be the first to share your experience.

Other Suspicious Websites Recently Analyzed

These domains received the same Suspicious verdict from ScamSandbox. Check them before visiting.

Screenshot of nahowin.com
nahowin.com
Suspicious 65/100
Screenshot of frgrth.com
frgrth.com
Suspicious 55/100
Screenshot of mesh-network.ai
mesh-network.ai
Suspicious 50/100
Screenshot of animepahe.com
animepahe.com
Suspicious 64/100
Screenshot of olmtoys.com
olmtoys.com
Suspicious 39/100
Screenshot of 64.190.76.2
64.190.76.2
Suspicious 40/100

What is get.activated.win?

get.activated.win is a website that was analyzed by ScamSandbox on October 12, 2026. Based on our automated analysis across 22 security sources, the domain exhibits suspicious characteristics commonly associated with online scams, phishing attempts, or fraudulent activity.

The domain was registered approximately 880 days ago through NAMECHEAP INC and the registrant is located in US. The domain's age suggests it has been operational for some time, which is a positive trust signal. The owner's registration details are hidden behind a WHOIS privacy service, which prevents public identification of who operates the site.

ScamSandbox cross-referenced get.activated.win against the VirusTotal database, which aggregates results from multiple security vendors. No security vendor in the VirusTotal database has flagged this domain as malicious or suspicious, which is a positive trust indicator.

The site uses a valid SSL/TLS certificate issued by Let's Encrypt . An SSL certificate encrypts data between the visitor and the server, but it does not guarantee the site is legitimate — scammers routinely obtain free SSL certificates for fraudulent sites.

get.activated.win is hosted by Fastly, Inc. at IP address 185.199.111.153 . The server uses shared hosting, meaning multiple websites share the same IP address — a configuration common among both budget legitimate sites and disposable scam domains. The site received an F grade for HTTP security headers, the lowest possible rating. This means the site has not implemented any of the standard browser security protections — including Content-Security-Policy, X-Frame-Options, HSTS, and Referrer-Policy. These missing headers leave visitors more exposed to clickjacking, cross-site scripting (XSS), and data leakage attacks.

The overall risk score assigned to get.activated.win by ScamSandbox is 55/100 (where 100 is the highest risk). This score is calculated by weighing signals from blacklist detections, domain age, WHOIS data, SSL certificate validity, HTTP security headers, content analysis, and community reports.

Security Provider Verdicts for get.activated.win

The table below shows the verdict from each major security provider checked during this scan. A Flagged result means the provider detected malicious, phishing, or abusive activity. Clean means no threat was detected. Not checked means the source was unavailable or not queried during this scan.

VirusTotal Aggregated results from 80+ antivirus engines
Clean
Google Safe Browsing Google's real-time phishing and malware database
Not checked
PhishTank Community-verified phishing URL database
Not checked
URLhaus Malware distribution URL tracking by abuse.ch
Not checked
AbuseIPDB IP address abuse reports and blacklist
Clean
Community Reports User-submitted scam reports on ScamSandbox
No reports
Web Intelligence Reddit, forums, and scam-reporting platforms
No negative mentions

How to stay safe with get.activated.win

get.activated.win has been flagged as suspicious. Before interacting with this website, consider these precautions:

  • Avoid entering payment information — use a virtual card or PayPal if you must purchase from this site, as these offer better chargeback protection.
  • Search for independent reviews — look for the domain on Trustpilot, Reddit, or ScamAdviser to see if other users have reported issues.
  • Verify contact information — legitimate businesses publish a physical address, phone number, and registered company details.
  • Check the return policy — fraudulent shops often have vague or non-existent return and refund policies.
  • Trust your instincts — prices that seem too good to be true usually are.

Frequently Asked Questions about get.activated.win

Based on our analysis, get.activated.win is not considered safe. The domain has been flagged as suspicious with a risk score of 55/100. We recommend avoiding this site until its legitimacy can be independently verified.

ScamSandbox assigned get.activated.win the verdict "Suspicious" based on a weighted combination of signals including:

  • Hidden WHOIS registration details — the owner's identity is concealed
  • HTTP security headers grade F — none of the standard browser protections are implemented
  • No privacy policy found — required by law in most countries for sites collecting user data
  • Shared hosting environment — the server IP is shared with 255 other domains
  • Overall risk score of 55/100 after weighing all signals

Note: ScamSandbox uses automated analysis — while these signals indicate elevated risk, they do not constitute definitive proof of fraud. Always verify independently before drawing final conclusions.

ScamSandbox performs a multi-layered automated analysis of get.activated.win in real time, querying 22 independent security sources simultaneously. The process includes:

  • Blacklist checks — VirusTotal, Google Safe Browsing, PhishTank, URLhaus, and AbuseIPDB
  • WHOIS and domain intelligence — registration date, registrar, registrant country, privacy status
  • SSL/TLS analysis — certificate validity, issuer, and expiration
  • DNS record analysis — A, MX, NS records, SPF and DMARC email security configuration
  • HTTP security headers — Content-Security-Policy, X-Frame-Options, HSTS, and other browser security directives
  • Content analysis — detection of login forms, payment forms, urgency language, and suspicious content patterns
  • Community intelligence — mentions on Reddit, scam-reporting forums, and user-submitted reports
  • Infrastructure analysis — hosting provider, IP geolocation, reverse IP lookup, and typosquatting detection
All results are combined into a single risk score from 0 (no risk) to 100 (maximum risk).

Based on public WHOIS records, get.activated.win was registered on 2024-05-15T02:03:37 through NAMECHEAP INC. The registrant's identity is protected by a WHOIS privacy service, which means the true owner's name, address, and contact details are not publicly available. While WHOIS privacy is also used by legitimate site owners who want to avoid spam, it is also commonly used by fraudulent operators to hide their identity.

The site's server is operated by Fastly, Inc. . The hosting provider is separate from the domain registrar and does not necessarily identify the person who controls the website.

Yes. If you have personally experienced fraud, phishing, or deceptive practices from get.activated.win, you can submit a community report directly on this page using the "Submit a Report" button in the Community Reports section above. Your report helps other users make informed decisions and contributes to our threat intelligence database.

You can also report the site to official authorities:

  • Google Safe Browsing — report phishing at safebrowsing.google.com/safebrowsing/report_phish/
  • PhishTank — submit phishing URLs at phishtank.org
  • FTC (US) — file a complaint at reportfraud.ftc.gov
  • Action Fraud (UK) — report at actionfraud.police.uk
  • DGCCRF (France) — report at signal.conso.gouv.fr