1utilaje.ro - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned 1utilaje.ro and returned a unknown verdict (score 6). The page resolved to 3.125.172.46 on A100 ROW GmbH in DE. 7 domains and 1 IP were contacted, over 3 HTTP requests. 3 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 9%
- Scanned URL:
http://1utilaje.ro/mm/file/56397693142.pdf - Domain: 1utilaje.ro · IP: 3.125.172.46 · AS16509 · DE
- Server: webnode
- Page title: 404 - Pagina nu a fost găsită :: bostitch
- HTTP status: 404 · text/html; charset=UTF-8
- HTTP requests captured: 3
- Scan tier: standard · observed 2026-08-19 21:12:18 UTC
Malware communicating with this URL (3)
These samples were observed contacting or being served from 1utilaje.ro. Each links to its full analysis.
- Phishing - referenced ·
1e6372115ce4ab70c165c2944ee0879a· first seen 2026-08-15 - Phishing - referenced ·
4dba1a1a16b0d8c39516e023b8f0b847· first seen 2026-08-13 - Phishing - referenced ·
67bd60767dea5f8a5e53182fb5d3108d· first seen 2026-08-12
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Served over plaintext HTTP
Detected technologies
- Google Analytics
Contacted infrastructure
- 3.125.172.46 - AS16509 A100 ROW GmbH (Germany)
Observed indicators
- 1utilaje.ro
- duyn491kcolsw.cloudfront.net
- fonts.gstatic.com
- www.1utilaje.ro
- www.googletagmanager.com
- 7f624ae027.clvaw-cdnwnd.com
- www.webnode.ro
- 3.125.172.46
- http://1utilaje.ro/mm/file/56397693142.pdf
- https://duyn491kcolsw.cloudfront.net/
- https://fonts.gstatic.com/
- https://duyn491kcolsw.cloudfront.net/files/03/03l/03lww0.svg?ph=7f624ae027
- https://duyn491kcolsw.cloudfront.net/files/1p/1pf/1pfgaj.svg?ph=7f624ae027
- https://duyn491kcolsw.cloudfront.net/files/2s/2sd/2sd9d9.ico?ph=7f624ae027
- https://duyn491kcolsw.cloudfront.net/files/0r/0rk/0rklmm.css?ph=7f624ae027
- https://duyn491kcolsw.cloudfront.net/files/3n/3ny/3ny4od.css?ph=7f624ae027
- https://duyn491kcolsw.cloudfront.net/files/0y/0yi/0yim3n.css?ph=7f624ae027
- https://duyn491kcolsw.cloudfront.net/files/38/386/386ytp.css?ph=7f624ae027
- https://duyn491kcolsw.cloudfront.net/files/0o/0on/0onzbj.css?ph=7f624ae027
- https://duyn491kcolsw.cloudfront.net/files/34/34q/34qmjb.css?ph=7f624ae027
Other scans of 1utilaje.ro (7)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 22 Aug 2026 - unknown ·
http://1utilaje.ro/mm/file/risisogawoso.pdf - 22 Aug 2026 - unknown ·
http://1utilaje.ro/mm/file/risisogawoso.pdf - 20 Aug 2026 - unknown ·
http://1utilaje.ro/mm/file/96386257558.pdf - 20 Aug 2026 - unknown ·
http://1utilaje.ro/mm/file/96386257558.pdf - 19 Aug 2026 - unknown
- 12 Aug 2026 - unknown ·
http://1utilaje.ro/mm/file/gedelerokakudopufer.pdf - 12 Aug 2026 - unknown ·
http://1utilaje.ro/mm/file/gedelerokakudopufer.pdf
Questions about 1utilaje.ro
- Is 1utilaje.ro safe?
- The scan of 1utilaje.ro on 19 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with 1utilaje.ro?
- 3 analysed samples communicate with this URL, including Phishing.
- How was 1utilaje.ro checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of 1utilaje.ro
Scanned on MalwareAnalyzer by Cyble · Open interactive scan