gateway.tenderly.co
Category: Technology
- Don't sign in or pay here. Close it. If you typed a password, change it where you normally use it.
- Already visited? Check your device. A free scan shows whether anything was installed.
- Stop the next one. Combo Cleaner's web protection blocks phishing and scam sites before they load.
Combo Cleaner is PCrisk's own anti-malware tool, owned by RCS LT. Free to scan; removing what it finds needs a licence (7-day free trial).
Description of gateway.tenderly.co
gateway.tenderly.co appears to be a subdomain associated with Tenderly, a technology platform used for blockchain and smart-contract development, monitoring, and infrastructure services. The "gateway" naming suggests this host may function as an API endpoint, routing layer, or service gateway rather than a consumer-facing website with broad public content.
Based on the domain structure and hosting details, this service appears to be operated as part of Tenderly's broader cloud-based infrastructure. It is hosted on Google Cloud and uses an Envoy web server with a valid TLS certificate, which is consistent with a modern application or backend service deployment rather than a simple informational webpage.
Safety Assessment for gateway.tenderly.co
At the time of this scan, the domain was flagged by 7 security engines, with several classifying it as phishing or malicious. That level of multi-engine detection is a meaningful caution signal, even though major threat databases and browser-oriented blacklist checks included in the scan did not report active listings. The domain's IP and blacklist checks were otherwise largely clean, aside from one generic suspicious-object style listing, which on its own would be a weaker signal than the multi-engine phishing detections.
There are also some contextual factors that slightly reduce uncertainty: the domain has been registered for several years, uses valid HTTPS, and appears to belong to a real technology service rather than a throwaway domain. In addition, the malware scan did not identify flagged files, links, or iframes at the time of this scan. Even so, the repeated phishing-related detections across multiple security engines suggest the host may present potential risk, could be misclassified, or may be used in a way that triggers reputation systems. Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain uses a valid Let's Encrypt SSL/TLS certificate with expiry shown as 2027-01-11, and it resolves to an IP hosted on Google Cloud in Kansas City, United States. The reported web server is Envoy, which is commonly used as a proxy or gateway component in modern cloud infrastructure. The nameserver set points to Google-managed DNS, indicating a professionally hosted environment.
DNSSEC appears to be unsigned, which is not uncommon but means DNS responses do not benefit from DNSSEC validation. No malicious files, external links, or iframe activity were identified by the available malware scan at the time of this check. The main technical concern in this dataset is reputational rather than infrastructural: multiple security engines flagged the domain despite otherwise standard hosting and certificate configuration.
Share your experience with this website. Was it safe? Did you encounter any issues?