aurastaffing.es - malicious URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned aurastaffing.es and returned a malicious verdict (score 60). The page resolved to 217.76.132.139 on ARSYS-RIPE-MNT in ES. 1 domain and 1 IP were contacted. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: malicious (score 60) · Confidence 69%
- Scanned URL:
http://aurastaffing.es/upload/file/gatevuz.pdf - Domain: aurastaffing.es · IP: 217.76.132.139 · AS8560 · ES
- Server: Apache
- HTTP status: 200 · application/pdf
- Scan tier: standard · observed 2026-08-22 17:20:44 UTC
Antivirus & YARA (1 of 48 engines)
- ClamAV (daily) [av]: Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0 (served file)
Why this verdict
- Antivirus/YARA detection in page content: Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0
- File download routed to the malware sandbox (gatevuz.pdf)
- Served over plaintext HTTP
Detected technologies
- Apache
Contacted infrastructure
- 217.76.132.139 - AS8560 ARSYS-RIPE-MNT (ES)
Files served by this page
- gatevuz.pdf ·
ab6d74036afb4652a2ef2a119b8300d4
Observed indicators
- aurastaffing.es
- 217.76.132.139
- http://aurastaffing.es/upload/file/gatevuz.pdf
Other scans of aurastaffing.es (3)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - malicious ·
http://aurastaffing.es/upload/file/26208991266.pdf - 22 Aug 2026 - malicious
- 9 Aug 2026 - suspicious ·
http://aurastaffing.es/upload/file/tutasemarat.pdf
Questions about aurastaffing.es
- Is aurastaffing.es safe?
- No. MalwareAnalyzer scanned aurastaffing.es on 22 Aug 2026 and returned a malicious verdict with a score of 60 out of 100. Treat it as hostile until it is re-checked.
- How was aurastaffing.es checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of aurastaffing.es
Scanned on MalwareAnalyzer by Cyble · Open interactive scan