extranet.blanchisserie-toulousaine-de-sante.com - URL scan, 15 Aug 2026
MalwareAnalyzer by Cyble scanned extranet.blanchisserie-toulousaine-de-sante.com and returned a unknown verdict (score 18), categorised as credential-harvest. The page resolved to 51.91.93.128 on Gourlin Fabien in FR. The domain was registered 3375 days ago through Gandi SAS. 6 domains and 1 IP were contacted, over 19 HTTP requests. 9 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 15 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 18) · Confidence 21%
- Scanned URL:
https://extranet.blanchisserie-toulousaine-de-sante.com/sites/extranet.blanchisserie-toulousaine-de-sante.com/files/documents/justificatifs/bugoxugokerudanetisene.pdf - Domain: extranet.blanchisserie-toulousaine-de-sante.com · IP: 51.91.93.128 · AS16276 · FR
- Page title: User account
- HTTP status: 200 · text/html; charset=utf-8
- Registrar: Gandi SAS · domain age 3375 days · created 2017-05-18
- HTTP requests captured: 19
- Scan tier: fast · observed 2026-08-15 03:38:25 UTC
Redirect chain
https://extranet.blanchisserie-toulousaine-de-sante.com/sites/extranet.blanchisserie-toulousaine-de-sante.com/files/documents/justificatifs/bugoxugokerudanetisene.pdfhttps://extranet.blanchisserie-toulousaine-de-sante.com/connexion
Malware communicating with this URL (9)
These samples were observed contacting or being served from extranet.blanchisserie-toulousaine-de-sante.com. Each links to its full analysis.
- Phishing - referenced ·
757b83da42096150c23ad05fdae5eaac· first seen 2026-08-15 - Phishing - referenced ·
3bff2113039429f8b3852742ab52606e· first seen 2026-08-14 - Phishing - referenced ·
5420d8c3cf4c2f284d15b1a4c79fdc1e· first seen 2026-08-14 - Phishing - referenced ·
fbe8e07785cbbbfc764e8bae7b9bd37d· first seen 2026-08-13 - Phishing - referenced ·
5570301726e832bb789d2aeafb4cf95e· first seen 2026-08-13 - Phishing - referenced ·
039c1c11a965f472ce1c32913e2d068f· first seen 2026-08-13 - Phishing - referenced ·
a265c519b84a8e0e5cd6e4ccdb5e7973· first seen 2026-08-13 - Phishing - referenced ·
5863d31856a831d05358230a48bfc2cd· first seen 2026-08-13 - Phishing - referenced ·
a33d745dc4debeba77cdc25e8219264c· first seen 2026-08-12
Antivirus & YARA (0 of 44 engines)
No engine flagged this page's content.
Categories
- credential-harvest
Why this verdict
- Credential-harvesting form
Detected technologies
- Drupal
- jQuery
Contacted infrastructure
- 51.91.93.128 - AS16276 Gourlin Fabien (France)
Observed indicators
- extranet.blanchisserie-toulousaine-de-sante.com
- fonts.googleapis.com
- maxcdn.bootstrapcdn.com
- code.jquery.com
- cdnjs.cloudflare.com
- www.blanchisserie-toulousaine-de-sante.com
- 51.91.93.128
- https://extranet.blanchisserie-toulousaine-de-sante.com/connexion
- https://extranet.blanchisserie-toulousaine-de-sante.com/sites/extranet.blanchisserie-toulousaine-de-sante.com/files/favicons/apple-touch-icon.png
- https://extranet.blanchisserie-toulousaine-de-sante.com/sites/extranet.blanchisserie-toulousaine-de-sante.com/files/favicons/favicon-32x32.png
- https://extranet.blanchisserie-toulousaine-de-sante.com/sites/extranet.blanchisserie-toulousaine-de-sante.com/files/favicons/favicon-16x16.png
- https://extranet.blanchisserie-toulousaine-de-sante.com/sites/extranet.blanchisserie-toulousaine-de-sante.com/files/favicons/manifest.json
- https://extranet.blanchisserie-toulousaine-de-sante.com/sites/extranet.blanchisserie-toulousaine-de-sante.com/files/favicons/safari-pinned-tab.svg
- https://fonts.googleapis.com/css?family=Raleway:400,500,600,700
- https://maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
- https://code.jquery.com/jquery-1.12.4.min.js
- https://extranet.blanchisserie-toulousaine-de-sante.com/sites/all/modules/jquery_update/replace/jquery/1.10/jquery.min.js?v=1.10.2
- https://extranet.blanchisserie-toulousaine-de-sante.com/misc/jquery-extend-3.4.0.js?v=1.10.2
- https://extranet.blanchisserie-toulousaine-de-sante.com/misc/jquery-html-prefilter-3.5.0-backport.js?v=1.10.2
- https://extranet.blanchisserie-toulousaine-de-sante.com/misc/jquery.once.js?v=1.2
Other scans of extranet.blanchisserie-toulousaine-de-sante.com (8)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 19 Aug 2026 - unknown
- 16 Aug 2026 - unknown
- 16 Aug 2026 - unknown
- 15 Aug 2026 - unknown
- 15 Aug 2026 - unknown
- 13 Aug 2026 - unknown
- 13 Aug 2026 - unknown
- 13 Aug 2026 - unknown
Questions about extranet.blanchisserie-toulousaine-de-sante.com
- Is extranet.blanchisserie-toulousaine-de-sante.com safe?
- The scan of extranet.blanchisserie-toulousaine-de-sante.com on 15 Aug 2026 reached no verdict either way (score 18). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with extranet.blanchisserie-toulousaine-de-sante.com?
- 9 analysed samples communicate with this URL, including Phishing.
- How was extranet.blanchisserie-toulousaine-de-sante.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of extranet.blanchisserie-toulousaine-de-sante.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan