cul-jz-s9bb4.vicloud.cloud - suspicious URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned cul-jz-s9bb4.vicloud.cloud and returned a suspicious verdict (score 43), categorised as phishing. The page resolved to 78.17.234.214. The domain was registered 701 days ago through Cloudflare. 1 domain and 1 IP were contacted, over 1 HTTP request. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

• Verdict: suspicious (score 43) · Confidence 49%
• Scanned URL: https://cul-jz-s9bb4.vicloud.cloud/
• Domain: cul-jz-s9bb4.vicloud.cloud · IP: 78.17.234.214
• Server: nginx
• Page title: StorageDrive - Object Storage
• HTTP status: 200 · text/html
• Registrar: Cloudflare · domain age 701 days · created 2024-09-19
• TLS issuer: C=US, O=Let's Encrypt, CN=YE1 · valid to Nov 20 05: · subject CN=cul-jz-s9bb4.vicloud.cloud
• HTTP requests captured: 1 · outgoing links: 2
• Scan tier: standard · observed 2026-08-22 14:04:58 UTC

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Categories

• phishing

Why this verdict

• Domain impersonates icloud (typosquat)
• Certificate issued < 48h ago

Detected technologies

• Nginx

Contacted infrastructure

• 78.17.234.214 - AS215468 interlir-mnt (PL)

Observed indicators

• cul-jz-s9bb4.vicloud.cloud
• 78.17.234.214
• https://cul-jz-s9bb4.vicloud.cloud/
• https://cul-jz-s9bb4.vicloud.cloud/login/

Questions about cul-jz-s9bb4.vicloud.cloud

Is cul-jz-s9bb4.vicloud.cloud safe?

No. MalwareAnalyzer scanned cul-jz-s9bb4.vicloud.cloud on 22 Aug 2026 and returned a suspicious verdict with a score of 43 out of 100, categorised as phishing. Treat it as hostile until it is re-checked.

How was cul-jz-s9bb4.vicloud.cloud checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of cul-jz-s9bb4.vicloud.cloud

Scanned on MalwareAnalyzer by Cyble · Open interactive scan