The scan of ercrs.org on 15 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with ercrs.org?

6 analysed samples communicate with this URL, including Phishing.

How was ercrs.org checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

ercrs.org - URL scan, 15 Aug 2026

MalwareAnalyzer by Cyble scanned ercrs.org and returned a unknown verdict (score 0). The page resolved to 104.21.22.44 on Cloudflare, Inc. in US. The domain was registered 23 days ago through Cloudflare, Inc.. 1 domain and 1 IP were contacted, over 1 HTTP request. 6 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 15 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 0) · Confidence 3%
Scanned URL: https://ercrs.org/wp-content/plugins/super-forms/uploads/php/files/ohbeapk0pis0k6aqvis6d0tb48/lagixabe.pdf
Domain: ercrs.org · IP: 104.21.22.44 · AS13335 · US
Server: cloudflare
Page title: Just a moment...
HTTP status: 403 · text/html; charset=UTF-8
Registrar: Cloudflare, Inc. · domain age 23 days · created 2026-07-23
HTTP requests captured: 1
Scan tier: fast · observed 2026-08-15 14:50:53 UTC

Malware communicating with this URL (6)

These samples were observed contacting or being served from ercrs.org. Each links to its full analysis.

Phishing - referenced · ec082e76d29a2e67a1dbbe32b721d1ea · first seen 2026-08-15
Phishing - referenced · 0ef3c58ffbee7c10ae9bbbc395d99e58 · first seen 2026-08-15
Phishing - referenced · d34abe8641d5580294fa0aea9d99b939 · first seen 2026-08-14
Phishing - referenced · 8bf8260a5de29fab5a4ee97a6ed577c5 · first seen 2026-08-13
Phishing - referenced · 29da4e27da48381d13b56a8261a3faf1 · first seen 2026-08-13
Phishing - referenced · 766082e24568f6b852ed737b5c23b378 · first seen 2026-08-13

Antivirus & YARA (0 of 44 engines)

No engine flagged this page's content.

Why this verdict

Domain registered 23 day(s) ago

Detected technologies

Cloudflare
WordPress

Contacted infrastructure

104.21.22.44 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

ercrs.org
104.21.22.44
https://ercrs.org/wp-content/plugins/super-forms/uploads/php/files/ohbeapk0pis0k6aqvis6d0tb48/lagixabe.pdf
https://ercrs.org/.webmcp/bridge.js
https://ercrs.org/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=a2b903a58ddf53e7

Other scans of ercrs.org (2)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

22 Aug 2026 - unknown · https://ercrs.org/wp-content/plugins/super-forms/uploads/php/files/gt5f3vi9i192g98b9r08birmrh/bugere
16 Aug 2026 - unknown · https://ercrs.org/wp-content/plugins/super-forms/uploads/php/files/df9pcd2pg38mim6ad6d4kniicb/198926

Questions about ercrs.org

Is ercrs.org safe?: The scan of ercrs.org on 15 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with ercrs.org?: 6 analysed samples communicate with this URL, including Phishing.
How was ercrs.org checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of ercrs.org

Scanned on MalwareAnalyzer by Cyble · Open interactive scan