dentinale.baby - malicious URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned dentinale.baby and returned a malicious verdict (score 56), categorised as credential-harvest. The page resolved to 95.182.119.36 on AIRNET llc in UZ. The domain was registered 181 days ago through Registrar of Domain Names REG.RU LLC. 9 domains and 2 IPs were contacted, over 7 HTTP requests. 1 malware sample communicates with this URL (Phishing). The request followed 2 redirects before landing. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: malicious (score 56) · Confidence 65%
- Scanned URL:
https://dentinale.eu/wp-content/plugins/super-forms/uploads/php/files/3e2eeaa4c536bfa1e5325508db6073f9/fubuzezuxase.pdf - Domain: dentinale.baby · IP: 95.182.119.36 · AS212860 · UZ
- Server: nginx/1.30.4
- Page title: Dentinale® natura — гель при прорезывании зубов | Натуральный уход за дёснами малыша
- HTTP status: 200 · text/html; charset=UTF-8
- Registrar: Registrar of Domain Names REG.RU LLC · domain age 181 days · created 2026-02-19
- HTTP requests captured: 7
- Scan tier: fast · observed 2026-08-19 21:14:20 UTC
Redirect chain
https://dentinale.eu/wp-content/plugins/super-forms/uploads/php/files/3e2eeaa4c536bfa1e5325508db6073f9/fubuzezuxase.pdfhttps://aptechka4kids.com/dentinale-natura/https://dentinale.baby/
Malware communicating with this URL (1)
These samples were observed contacting or being served from dentinale.baby. Each links to its full analysis.
- Phishing - referenced ·
0449812e36945bb8799ba712415c887e· first seen 2026-08-19
Antivirus & YARA (1 of 47 engines)
- YARA: SophosLabs IoCs (public) [yara]: SOPHOS_Gootloader_JS (page content)
Categories
- credential-harvest
Why this verdict
- Antivirus/YARA detection in page content: SOPHOS_Gootloader_JS
- Credential-harvesting form
- Cross-host redirect chain
Detected technologies
- Nginx
- Google Analytics
Contacted infrastructure
- 95.182.119.36 - AS212860 AIRNET llc (Uzbekistan)
- 45.82.14.227 - AS9123 TimeWeb Ltd. (Kazakhstan)
Observed indicators
- dentinale.baby
- www.googletagmanager.com
- aptechka4kids.com
- ge.dentinale.baby
- ge-en.dentinale.baby
- t.me
- vk.com
- vkvideo.ru
- ok.ru
- 95.182.119.36
- 45.82.14.227
- https://dentinale.baby/
- https://www.googletagmanager.com/gtm.js?id=
- https://dentinale.baby/favicon.svg
- https://dentinale.baby/local/components/dentinale/include.template/templates/about.product/style.css?17798746394604
- https://dentinale.baby/local/components/dentinale/include.template/templates/product.video/style.css?17798662461834
- https://dentinale.baby/local/components/dentinale/include.template/templates/teething.symptoms/style.css?17798662462410
- https://dentinale.baby/local/components/dentinale/include.template/templates/how.use/style.css?17798662462812
- https://dentinale.baby/local/components/dentinale/include.template/templates/teething.schema/style.css?17798662462539
- https://dentinale.baby/local/components/dentinale/iblock.elements/templates/faq/style.css?17798771523533
Other scans of dentinale.baby (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - malicious
- 16 Aug 2026 - malicious
Questions about dentinale.baby
- Is dentinale.baby safe?
- No. MalwareAnalyzer scanned dentinale.baby on 19 Aug 2026 and returned a malicious verdict with a score of 56 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.
- What malware is associated with dentinale.baby?
- 1 analysed samples communicate with this URL, including Phishing.
- How was dentinale.baby checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of dentinale.baby
Scanned on MalwareAnalyzer by Cyble · Open interactive scan