Is aleeblog.com safe?

No. MalwareAnalyzer scanned aleeblog.com on 19 Aug 2026 and returned a suspicious verdict with a score of 40 out of 100. Treat it as hostile until it is re-checked.

What malware is associated with aleeblog.com?

9 analysed samples communicate with this URL, including Phishing.

How was aleeblog.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

aleeblog.com - suspicious URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned aleeblog.com and returned a suspicious verdict (score 40). The page resolved to 143.198.123.0 on DigitalOcean, LLC in US. The domain was registered 3088 days ago through GoDaddy.com, LLC. 1 domain and 1 IP were contacted, over 5 HTTP requests. 9 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 40) · Confidence 43%
Scanned URL: http://aleeblog.com/wp-content/plugins/super-forms/uploads/php/files/t44vj77hrat2f6qso6bsgppuv6/44723018208.pdf
Domain: aleeblog.com · IP: 143.198.123.0 · AS14061 · US
Server: nginx
Page title: UniFi OS
HTTP status: 200 · text/html
Registrar: GoDaddy.com, LLC · domain age 3088 days · created 2018-03-06
HTTP requests captured: 5
Scan tier: fast · observed 2026-08-19 18:26:46 UTC

Redirect chain

http://aleeblog.com/wp-content/plugins/super-forms/uploads/php/files/t44vj77hrat2f6qso6bsgppuv6/44723018208.pdf
https://aleeblog.com/wp-content/plugins/super-forms/uploads/php/files/t44vj77hrat2f6qso6bsgppuv6/44723018208.pdf

Malware communicating with this URL (9)

These samples were observed contacting or being served from aleeblog.com. Each links to its full analysis.

Phishing - referenced · 9d3a91d0389a4ff5791ec1b998878c5c · first seen 2026-08-19
30107256256.pdf - referenced · fc5ec4e14e6a9a81258d1cc5bd049c57 · first seen 2026-08-17
0a6b565305ec0e126b8c8d00ffce64477a3f3c72f5291c153da3f25195e2a0e2 - referenced · 0a6b565305ec0e126b8c8d00ffce6447 · first seen 2026-08-16
Phishing - referenced · 8041ddc3e7962a163b76409f1b7f9599 · first seen 2026-08-15
Phishing - referenced · f1490c89aaccdcdfe9bce2151d5916e9 · first seen 2026-08-14
Phishing - referenced · 2d2347dcd9d7fd9406a00657333c9df2 · first seen 2026-08-14
Phishing - referenced · ddbed76212d6037dd3a40c768d13b355 · first seen 2026-08-13
Phishing - referenced · 0ff28c8d727c7329a51ec0564f69a284 · first seen 2026-08-13
Phishing - referenced · 3015d872b87ab7f1c608474be7a39056 · first seen 2026-08-13

Antivirus & YARA (1 of 47 engines)

YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)

These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.

Why this verdict

Antivirus/YARA detection in page content: DLV_HTML_Smuggling

Detected technologies

Nginx

Contacted infrastructure

143.198.123.0 - AS14061 DigitalOcean, LLC (United States)

Observed indicators

aleeblog.com
143.198.123.0
https://aleeblog.com/wp-content/plugins/super-forms/uploads/php/files/t44vj77hrat2f6qso6bsgppuv6/44723018208.pdf
https://aleeblog.com/favicon.ico?v3
https://aleeblog.com/favicon.svg?v3
https://aleeblog.com/apple-touch-icon.png?v3
https://aleeblog.com/275.b000d28b1af67a7c.js
https://aleeblog.com/905.fd76e8621a094e56.js
https://aleeblog.com/989.fa2243d6c6142af9.js
https://aleeblog.com/main~0.6f14d5e9dbaf48c5.js
https://aleeblog.com/main~2.0d717b84ac15d317.js
https://aleeblog.com/fonts/InterVariable.0336a89fb4e7fc1d.woff2
https://aleeblog.com/main~1.9c886289.css

Other scans of aleeblog.com (3)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

17 Aug 2026 - unknown · http://aleeblog.com/wp-content/plugins/super-forms/uploads/php/files/0f0bah9gavlgcuttta9v1cppd4/zufa
13 Aug 2026 - unknown · http://aleeblog.com/wp-content/plugins/super-forms/uploads/php/files/76m7g0mea8tuj5491qeg2ejrd6/9279
13 Aug 2026 - unknown · http://aleeblog.com/wp-content/plugins/super-forms/uploads/php/files/e53b77vsonmlvch19jpn3i0ag5/ronu

Questions about aleeblog.com

Is aleeblog.com safe?: No. MalwareAnalyzer scanned aleeblog.com on 19 Aug 2026 and returned a suspicious verdict with a score of 40 out of 100. Treat it as hostile until it is re-checked.
What malware is associated with aleeblog.com?: 9 analysed samples communicate with this URL, including Phishing.
How was aleeblog.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of aleeblog.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan