avrig35.ro - URL scan, 24 Aug 2026
MalwareAnalyzer by Cyble scanned avrig35.ro and returned a unknown verdict (score 8). The page resolved to 81.12.225.163 on SC Avrig 35 S.R.L. in RO. 1 domain and 1 IP were contacted, over 4 HTTP requests. 3 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 24 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 8) · Confidence 11%
- Scanned URL:
http://avrig35.ro/uploads/fck_editor/file/81884447170.pdf - Domain: avrig35.ro · IP: 81.12.225.163 · AS12302 · RO
- Server: Axigen-Webmail
- HTTP status: 200 · text/html; charset=utf-8
- TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Sep 29 10: · subject CN=ns.iamgt.ro
- HTTP requests captured: 4
- Scan tier: standard · observed 2026-08-24 02:11:15 UTC
Redirect chain
http://avrig35.ro/uploads/fck_editor/file/81884447170.pdfhttps://avrig35.ro/
Malware communicating with this URL (3)
These samples were observed contacting or being served from avrig35.ro. Each links to its full analysis.
- Phishing - referenced ·
f3c0d8ed2a303c2d19f1a5e612eea21d· first seen 2026-08-21 - Phishing - referenced ·
f95a8a1122608c9c8f958f77d5fd5de6· first seen 2026-08-19 - Phishing - referenced ·
8e3a66a952f6e5c8c9d0471483eabf46· first seen 2026-08-17
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Untrusted certificate (UNABLE_TO_VERIFY_LEAF_SIGNATURE)
Detected technologies
- React
Contacted infrastructure
- 81.12.225.163 - AS12302 SC Avrig 35 S.R.L. (Romania)
Observed indicators
- avrig35.ro
- 81.12.225.163
- https://avrig35.ro/
- https://avrig35.ro/private/ajax/Resources/css/axi-custom-scrollbar.css?v=10635
- https://avrig35.ro/css/axigen-web-fonts.css?v=10635
- https://avrig35.ro/react-login/build/styles.css?v=10635
- https://avrig35.ro/react-login/build/styles-ocean.css?v=10635
- https://avrig35.ro/react-login/build/styles-breeze.css?v=10635
- https://avrig35.ro/react-login/build/styles-neutral.css?v=10635
- https://avrig35.ro/react-login/build/styles-rtl.css?v=10635
- https://avrig35.ro/react/build/require.js?v=10635
- https://avrig35.ro/react-login/build/runtime.js?v=10635
- https://avrig35.ro/react-login/build/vendor.js?v=10635
- https://avrig35.ro/react-login/build/bundle.js?v=10635
Other scans of avrig35.ro (3)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown
- 21 Aug 2026 - unknown
- 21 Aug 2026 - unknown
Questions about avrig35.ro
- Is avrig35.ro safe?
- The scan of avrig35.ro on 24 Aug 2026 reached no verdict either way (score 8). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with avrig35.ro?
- 3 analysed samples communicate with this URL, including Phishing.
- How was avrig35.ro checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of avrig35.ro
Scanned on MalwareAnalyzer by Cyble · Open interactive scan