cncostruzioni.com - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned cncostruzioni.com and returned a unknown verdict (score 0). The page resolved to 161.97.95.198 on Contabo GmbH in DE. The domain was registered 6269 days ago through Register SPA. 4 domains and 1 IP were contacted. 8 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 0%
- Scanned URL:
https://cncostruzioni.com/userfiles/file/37089176372.pdf - Domain: cncostruzioni.com · IP: 161.97.95.198 · AS51167 · DE
- Server: Apache
- Page title: Dominio Registrato - Studiomono
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: Register SPA · domain age 6269 days · created 2009-06-22
- Scan tier: fast · observed 2026-08-21 22:37:06 UTC
Malware communicating with this URL (8)
These samples were observed contacting or being served from cncostruzioni.com. Each links to its full analysis.
- Phishing - referenced ·
092c5bd68ea3ded670f6bfd9eb684582· first seen 2026-08-21 - Phishing - referenced ·
00ea972dc577753423e60a9558209e36· first seen 2026-08-21 - Phishing - referenced ·
b880b1592ba3b5d847261ebbe2825a4f· first seen 2026-08-20 - Phishing - referenced ·
9e402f1bbcdb2f67daad0fc07fc49736· first seen 2026-08-19 - Phishing - referenced ·
b77036d94bc29e6a72e2837723e444e0· first seen 2026-08-16 - Phishing - referenced ·
90b047a8de619a5938a169a2c201fb68· first seen 2026-08-15 - Phishing - referenced ·
4ad1c63af2b74120c70e57d4decb0bda· first seen 2026-08-15 - Phishing - referenced ·
82f8663cf4289ef383f9a1f6ca796797· first seen 2026-08-11
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Detected technologies
- Apache
- WordPress
Contacted infrastructure
- 161.97.95.198 - AS51167 Contabo GmbH (Germany)
Observed indicators
- cncostruzioni.com
- studiomono.it
- fonts.googleapis.com
- fonts.gstatic.com
- 161.97.95.198
- https://cncostruzioni.com/userfiles/file/37089176372.pdf
- https://studiomono.it/wp-content/uploads/2020/12/logo-studiomono-300x300-1.png
- https://fonts.googleapis.com/css?family=Roboto+Slab%3A300%2C400%2C700%7CMontserrat%3A200%2C300%2C400%7CInconsolata%7CHind+Madurai%3A400&ver=4.9.8
- https://fonts.googleapis.com/
- https://fonts.gstatic.com/
- https://fonts.googleapis.com/css2?family=Roboto+Condensed:ital,wght@0,100..900;1,100..900&display=swap
- https://studiomono.it/wp-content/uploads/2026/02/schermata-registrazione-dominio-studiomono.png
Other scans of cncostruzioni.com (5)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 21 Aug 2026 - unknown
- 19 Aug 2026 - unknown ·
https://cncostruzioni.com/userfiles/file/mosikig.pdf - 16 Aug 2026 - unknown ·
https://cncostruzioni.com/userfiles/file/fewazeligomenodixum.pdf - 16 Aug 2026 - unknown ·
https://cncostruzioni.com/userfiles/file/fewazeligomenodixum.pdf - 15 Aug 2026 - unknown ·
https://cncostruzioni.com/userfiles/file/juseminusemorivozu.pdf
Questions about cncostruzioni.com
- Is cncostruzioni.com safe?
- The scan of cncostruzioni.com on 21 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with cncostruzioni.com?
- 8 analysed samples communicate with this URL, including Phishing.
- How was cncostruzioni.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of cncostruzioni.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan