aldea.work - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned aldea.work and returned a unknown verdict (score 0). The page resolved to 104.21.90.200 on Cloudflare, Inc. in US. 7 domains and 1 IP were contacted, over 27 HTTP requests. 26 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 6%
- Scanned URL:
https://aldea.work/wp-content/plugins/super-forms/uploads/php/files/8e1610c0a9a8d42834316e902559695a/84777891135.pdf - Domain: aldea.work · IP: 104.21.90.200 · AS13335 · US
- Server: cloudflare
- Page title: Página no encontrada - Aldea
- HTTP status: 404 · text/html; charset=UTF-8
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Sep 26 01: · subject CN=aldea.work
- HTTP requests captured: 27
- Scan tier: fast · observed 2026-08-23 12:06:26 UTC
Malware communicating with this URL (26)
These samples were observed contacting or being served from aldea.work. Each links to its full analysis.
- Phishing - referenced ·
59eb2b1878798f6a039e7332475fefc3· first seen 2026-08-23 - Phishing - referenced ·
4562767d940902fd2fde95848012e27e· first seen 2026-08-23 - Phishing - referenced ·
689fa8b63ff61c218ee6097b5fc47f3f· first seen 2026-08-22 - Phishing - referenced ·
d28842a03719460cdca1a1df6195d7bc· first seen 2026-08-21 - Phishing - referenced ·
7fda84e2da1592928c103945e4f302c3· first seen 2026-08-19 - Phishing - referenced ·
453023f03d41c4b9e07e9fcc99319ce9· first seen 2026-08-17 - Phishing - referenced ·
85d967ca7a8bc41e236e0506f1c928e6· first seen 2026-08-17 - Phishing - referenced ·
1ec8f53b3c45d0944d5cb834e6ad9772· first seen 2026-08-16 - Phishing - referenced ·
33e5bf2806fcb674a9ae7cfa771321f7· first seen 2026-08-16 - Phishing - referenced ·
eebb4bcb9ef876c88dc01465de60379d· first seen 2026-08-16 - Phishing - referenced ·
cc84c6e2e7ddc46c3f3e3eb9ded07a9f· first seen 2026-08-16 - Phishing - referenced ·
8f55ed8bb493876556a800c5ac109a08· first seen 2026-08-16 - Phishing - referenced ·
012e59142eed65d187cc5fc7b69ca741· first seen 2026-08-16 - Phishing - referenced ·
24202ee2f0527a48babef335062c18bb· first seen 2026-08-16 - Phishing - referenced ·
10e49092a8d7961be47d4b3d17b307b6· first seen 2026-08-16
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Abuse-heavy TLD .work
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- WordPress
- Google Analytics
- jQuery
- Cloudflare Insights
Contacted infrastructure
- 104.21.90.200 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- aldea.work
- gmpg.org
- www.googletagmanager.com
- www.facebook.com
- www.instagram.com
- www.tiktok.com
- static.cloudflareinsights.com
- 104.21.90.200
- https://aldea.work/wp-content/plugins/super-forms/uploads/php/files/8e1610c0a9a8d42834316e902559695a/84777891135.pdf
- https://gmpg.org/xfn/11
- https://aldea.work/xmlrpc.php
- https://www.googletagmanager.com/
- https://aldea.work/feed/
- https://aldea.work/comments/feed/
- https://aldea.work/wp-content/plugins/header-footer-elementor/inc/widgets-css/frontend.css?ver=2.8.8
- https://aldea.work/wp-includes/css/dashicons.min.css?ver=7.1
- https://aldea.work/wp-content/plugins/translatepress-multilingual/assets/css/trp-language-switcher.css?ver=3.2.1
- https://aldea.work/wp-content/plugins/header-footer-elementor/assets/css/header-footer-elementor.css?ver=2.8.8
- https://aldea.work/wp-content/uploads/elementor/css/custom-frontend.min.css?ver=1787210186
- https://aldea.work/wp-content/uploads/elementor/css/post-6.css?ver=1787210186
Other scans of aldea.work (9)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 16 Aug 2026 - unknown ·
https://aldea.work/wp-content/plugins/super-forms/uploads/php/files/777909c3902bd7e98b2a6406df17e272 - 16 Aug 2026 - unknown ·
https://aldea.work/wp-content/plugins/super-forms/uploads/php/files/e163149db2b0851352445b0963ac0b9e - 16 Aug 2026 - unknown ·
https://aldea.work/wp-content/plugins/super-forms/uploads/php/files/bf7099a44b6ea95872944b8a4080743d - 16 Aug 2026 - unknown ·
https://aldea.work/wp-content/plugins/super-forms/uploads/php/files/1a9462ccdde95f478811097814000fdb - 15 Aug 2026 - unknown ·
https://aldea.work/wp-content/plugins/super-forms/uploads/php/files/71f5b7e11ba69475d2d77a4744ade9ae - 15 Aug 2026 - unknown ·
https://aldea.work/wp-content/plugins/super-forms/uploads/php/files/d27d27c6803eaef7369cd70987230392 - 14 Aug 2026 - unknown ·
https://aldea.work/wp-content/plugins/super-forms/uploads/php/files/2bcee8211635d56a68391bdf0d6a9718 - 13 Aug 2026 - unknown ·
https://aldea.work/wp-content/plugins/super-forms/uploads/php/files/412e1bc7ba3efd7e5465448e3ef34fa8 - 13 Aug 2026 - unknown ·
https://aldea.work/wp-content/plugins/super-forms/uploads/php/files/708a7593bda0085793769af2a3e0a4dd
Questions about aldea.work
- Is aldea.work safe?
- The scan of aldea.work on 23 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with aldea.work?
- 26 analysed samples communicate with this URL, including Phishing.
- How was aldea.work checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of aldea.work
Scanned on MalwareAnalyzer by Cyble · Open interactive scan