Is gctu-cgs.org safe?

The scan of gctu-cgs.org on 13 Aug 2026 reached no verdict either way (score -6). Too little was captured to judge it, which is an unknown rather than a pass.

How was gctu-cgs.org checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

gctu-cgs.org - URL scan, 13 Aug 2026

MalwareAnalyzer by Cyble scanned gctu-cgs.org and returned a unknown verdict (score -6). The page resolved to 95.142.40.175. The domain was registered 685 days ago through Regional Network Information Center, JSC dba RU-CENTER. 5 domains and 2 IPs were contacted, over 13 HTTP requests. The request followed 2 redirects before landing. This is a point-in-time observation from 13 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -6) · Confidence 12%
Scanned URL: http://vkp.ru/upload/global/file/43599122563.pdf
Domain: gctu-cgs.org · IP: 95.142.40.175
Server: nginx
Page title: Всеобщая конфедерация профсоюзов
HTTP status: 200 · text/html; charset=UTF-8
Registrar: Regional Network Information Center, JSC dba RU-CENTER · domain age 685 days · created 2024-09-27
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 1 01: · subject CN=www.gctu-cgs.org
HTTP requests captured: 13
Scan tier: standard · observed 2026-08-13 05:50:39 UTC

Redirect chain

http://vkp.ru/upload/global/file/43599122563.pdf
https://vkp.ru/upload/global/file/43599122563.pdf
https://gctu-cgs.org/

Antivirus & YARA (0 of 44 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post
Cross-host redirect chain

Detected technologies

Nginx
jQuery

Contacted infrastructure

95.142.40.175 - AS210079 EUROBYTE-MNT (RU)

Observed indicators

gctu-cgs.org
mc.yandex.ru
vk.com
t.me
code.jquery.com
95.142.40.175
185.154.54.10
https://gctu-cgs.org/
https://gctu-cgs.org/images/favicon.ico
https://gctu-cgs.org/assets/fonts/ubuntu-regular.woff2
https://gctu-cgs.org/assets/fonts/ubuntu-medium.woff2
https://gctu-cgs.org/assets/fonts/ubuntu-bold.woff2
https://gctu-cgs.org/assets/css/style.min.css
https://gctu-cgs.org/assets/slick/slick.css
https://gctu-cgs.org/assets/slick/slick-theme.css
https://gctu-cgs.org/assets/css/custom.css?v=1786600243
https://gctu-cgs.org/bitrix/js/intranet/intranet-common.min.css?173080651261199
https://gctu-cgs.org/bitrix/js/ui/design-tokens/dist/ui.design-tokens.min.css?173080654923463
https://gctu-cgs.org/bitrix/js/ui/fonts/opensans/ui.font.opensans.min.css?17308065572320
https://gctu-cgs.org/bitrix/css/labsu.cookie/style.css?1782114292998

Other scans of gctu-cgs.org (3)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

22 Aug 2026 - unknown
22 Aug 2026 - unknown
13 Aug 2026 - unknown

Questions about gctu-cgs.org

Is gctu-cgs.org safe?: The scan of gctu-cgs.org on 13 Aug 2026 reached no verdict either way (score -6). Too little was captured to judge it, which is an unknown rather than a pass.
How was gctu-cgs.org checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of gctu-cgs.org

Scanned on MalwareAnalyzer by Cyble · Open interactive scan