Is files.trefonen.org safe?

The scan of files.trefonen.org on 12 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with files.trefonen.org?

1 analysed samples communicate with this URL.

How was files.trefonen.org checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

files.trefonen.org - URL scan, 12 Aug 2026

MalwareAnalyzer by Cyble scanned files.trefonen.org and returned a unknown verdict (score 6). The page resolved to 199.34.228.42 on Weebly, Inc. in US. The domain was registered 3990 days ago through Register.com - Network Solutions, LLC. 1 domain and 1 IP were contacted. 1 malware sample communicates with this URL. This is a point-in-time observation from 12 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: http://files.trefonen.org/uploads/1/3/1/4/131407901/4877019.pdf
Domain: files.trefonen.org · IP: 199.34.228.42 · AS27647 · US
Server: cloudflare
HTTP status: 409 · text/plain; charset=UTF-8
Registrar: Register.com - Network Solutions, LLC · domain age 3990 days · created 2015-09-08
Scan tier: fast · observed 2026-08-12 07:46:29 UTC

Malware communicating with this URL (1)

These samples were observed contacting or being served from files.trefonen.org. Each links to its full analysis.

65774818208.pdf - referenced · 5cacd359f2191dde6f3bb0c6774c0b59 · first seen 2026-08-12

Antivirus & YARA (0 of 44 engines)

No engine flagged this page's content.

Why this verdict

Served over plaintext HTTP

Detected technologies

Cloudflare

Contacted infrastructure

199.34.228.42 - AS27647 Weebly, Inc. (United States)

Observed indicators

files.trefonen.org
199.34.228.42
http://files.trefonen.org/uploads/1/3/1/4/131407901/4877019.pdf

Other scans of files.trefonen.org (2)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

19 Aug 2026 - unknown · http://files.trefonen.org/uploads/1/3/1/1/131163533/63df3d00ca5db4.pdf
12 Aug 2026 - unknown

Questions about files.trefonen.org

Is files.trefonen.org safe?: The scan of files.trefonen.org on 12 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with files.trefonen.org?: 1 analysed samples communicate with this URL.
How was files.trefonen.org checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of files.trefonen.org

Scanned on MalwareAnalyzer by Cyble · Open interactive scan