cicatsalud.com - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned cicatsalud.com and returned a unknown verdict (score 6). The page resolved to 192.185.52.205 on HostGator.com LLC in US. The domain was registered 6851 days ago through Launchpad.com Inc.. 1 domain and 1 IP were contacted. 51 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 9%
- Scanned URL:
http://cicatsalud.com/html/sites/default/files/webform/65000750087.pdf - Domain: cicatsalud.com · IP: 192.185.52.205 · AS19871 · US
- Server: Apache
- HTTP status: 500 · text/html; charset=UTF-8
- Registrar: Launchpad.com Inc. · domain age 6851 days · created 2007-11-16
- Scan tier: fast · observed 2026-08-19 21:13:00 UTC
Malware communicating with this URL (51)
These samples were observed contacting or being served from cicatsalud.com. Each links to its full analysis.
- Phishing - referenced ·
0546d2ff5a7a8ecea4a98433f1c75901· first seen 2026-08-19 - Phishing - referenced ·
619ffc88fae359d6e78e6e892f193d8b· first seen 2026-08-19 - Phishing - referenced ·
5355478b1d4aaa4cb45790b098dd7cd7· first seen 2026-08-17 - Phishing - referenced ·
b02aa81f3e6375f0396c42478bd6d7f9· first seen 2026-08-17 - Phishing - referenced ·
97b3de999153537586962b7b0c02c757· first seen 2026-08-17 - Phishing - referenced ·
e82c8b5d0f81450c99377228ff604234· first seen 2026-08-17 - Phishing - referenced ·
39ac8c8e7f9e29a0239b65f20cf6af2f· first seen 2026-08-16 - Phishing - referenced ·
18c25db6ced31ccd053c87e4e6d5b07d· first seen 2026-08-16 - Phishing - referenced ·
aed73215f681f10a56d3fb1344bfd730· first seen 2026-08-16 - Phishing - referenced ·
159d66ac41ea7fed6e51243378297013· first seen 2026-08-16 - Phishing - referenced ·
f77f510ec27437c9ee09bd7a04f3faa1· first seen 2026-08-16 - Phishing - referenced ·
7085ed66f948beac1f39142272921e0f· first seen 2026-08-15 - Phishing - referenced ·
6e8cfff5dc9f1351dfe0165f9176e65c· first seen 2026-08-15 - Phishing - referenced ·
09fa85ac2712042d8917ca712ee6346f· first seen 2026-08-15 - Phishing - referenced ·
ae5ffba3b0ebde79462dc4a57e5042eb· first seen 2026-08-15
Why this verdict
- Served over plaintext HTTP
Detected technologies
- Apache
Contacted infrastructure
- 192.185.52.205 - AS19871 HostGator.com LLC (United States)
Observed indicators
- cicatsalud.com
- 192.185.52.205
- http://cicatsalud.com/html/sites/default/files/webform/65000750087.pdf
Other scans of cicatsalud.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 19 Aug 2026 - unknown ·
http://cicatsalud.com/html/sites/default/files/webform/28693943460.pdf - 19 Aug 2026 - unknown
- 17 Aug 2026 - unknown ·
http://cicatsalud.com/html/sites/default/files/webform/59286961246.pdf - 17 Aug 2026 - unknown ·
http://cicatsalud.com/html/sites/default/files/webform/25507329945.pdf - 17 Aug 2026 - unknown ·
http://cicatsalud.com/html/sites/default/files/webform/dekif.pdf - 17 Aug 2026 - unknown ·
http://cicatsalud.com/html/sites/default/files/webform/25507329945.pdf - 17 Aug 2026 - unknown ·
http://cicatsalud.com/html/sites/default/files/webform/dekif.pdf - 17 Aug 2026 - unknown ·
http://cicatsalud.com/html/sites/default/files/webform/93477879009.pdf - 17 Aug 2026 - unknown ·
http://cicatsalud.com/html/sites/default/files/webform/17654710786.pdf - 17 Aug 2026 - unknown ·
http://cicatsalud.com/html/sites/default/files/webform/93477879009.pdf
Questions about cicatsalud.com
- Is cicatsalud.com safe?
- The scan of cicatsalud.com on 19 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with cicatsalud.com?
- 51 analysed samples communicate with this URL, including Phishing.
- How was cicatsalud.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of cicatsalud.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan