diff --git a/UnsafeSites.md b/UnsafeSites.md
index e6d68cab1..49bcc6b0f 100644
--- a/UnsafeSites.md
+++ b/UnsafeSites.md
@@ -35,7 +35,7 @@
 * FTUApps - Caught with [malware](https://redd.it/120xk62) 
 * S0ft4PC / Portable4PC - Caught with malware
 * CracksHash - Caught with [malware](https://redd.it/lklst7)
-* haxNode - Caught with malware
+* haxNode - Caught with [malware](https://www.virustotal.com/gui/file/e6318aa4432c304b234df65f5d87bf2577b930ed68ac7e68efcb76b465dc0784)
 * IGI30 - Caught with malware
 * MainRepo / MRepo - Caught with [malware](https://rentry.co/zu3i6) / Note the the Magisk Module MRepo is unrelated 
 * AppValley / TutuBox / Ignition - History of [ddos attacks](https://github.com/nbats/FMHYedit/pull/307)