this is bussin — looks legit
Final verdict: Valid
Everything here appears safe. Carry on as normal, and trust your gut if something feels off.
Scan coverage
https://us-east.storage.cloudconvert.com/ • 10/25/2026, 2:15:52 AM • HTTP 200
How the score was calculated
Traffic between your browser and this server is encrypted over TLS.
The final page URL is served over HTTPS (https://us-east.storage.cloudconvert.com/).
Why it matters: Encryption prevents network eavesdroppers from intercepting your data or tampering with page content in transit.
Fix: Note that while HTTPS encrypts traffic, it does not verify whether the site's content or business is trustworthy.
No password input fields were detected in the page HTML.
No <input type="password"> tags found in static HTML.
Why it matters: The page does not appear to solicit user account passwords.
Fix: None required.
No Content-Security-Policy header was sent by the server.
Content-Security-Policy header absent.
Why it matters: A CSP provides defense-in-depth against code injection and unauthorized framing.
Fix: Deploy a Content-Security-Policy header.
Zero script tags were detected in the static HTML.
0 script elements found in fetched document.
Why it matters: Fewer scripts reduce client-side attack surface and third-party tracking.
Fix: None required.
The domain uses a standard top-level domain and natural length.
Host 'us-east.storage.cloudconvert.com' exhibits standard naming structure.
Why it matters: Domain structure conforms to typical human-selected naming conventions.
Fix: None required.
We did not find aggressive pressure tactics or typical prize scam language.
Zero tracked high-pressure scam keyword phrases matched.
Why it matters: The text does not show obvious automated scam indicators.
Fix: None required.
The site instructs browsers to only connect over HTTPS in the future.
Strict-Transport-Security: max-age=31536000; includeSubDomains.
Why it matters: HSTS protects users against SSL-stripping and man-in-the-middle downgrade attacks.
Fix: Maintain HSTS configuration with includeSubDomains and preload.
The site defines a Content Security Policy restricting resource execution.
Content-Security-Policy: default-src 'none';.
Why it matters: CSP helps prevent Cross-Site Scripting (XSS), malicious script injection, and clickjacking.
Fix: Maintain strict CSP directives without 'unsafe-inline' or 'unsafe-eval' where possible.
No links to a Terms of Service or Privacy Policy were detected on this page.
HTML links scan matched zero policy links.
Why it matters: Legitimate businesses and services publish policies explaining user rights, liability, and data practices.
Fix: Look for policies in the site footer or contact the website operator.
No links to a Terms of Service or Privacy Policy were detected on this page.
No links to a Terms of Service or Privacy Policy were detected on this page.
<?xml version="1.0" encoding="UTF-8"?><ListAllMyBucketsResult xmlns="http://s3.amazonaws.com/doc/2006-03-01/"><Owner><ID>anonymous</ID><DisplayName></DisplayName></Owner><Buckets></Buckets></ListAllMyBucketsResult>