Over 60% of the Mediafire links had been deleted by the time of analysis (due to DMCA or abuse reporting), but the remaining active links universally triggered Windows Defender alerts.