Is google.avtandil.be safe?

The scan of google.avtandil.be on 21 Aug 2026 reached no verdict either way (score 18). Too little was captured to judge it, which is an unknown rather than a pass.

How was google.avtandil.be checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

google.avtandil.be - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned google.avtandil.be and returned a unknown verdict (score 18), categorised as phishing. The page resolved to 52.58.199.228 on A100 ROW GmbH in DE. 10 domains and 3 IPs were contacted, over 38 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 18) · Confidence 24%
Scanned URL: https://google.avtandil.be/
Domain: google.avtandil.be · IP: 52.58.199.228 · AS16509 · DE
Server: nginx/1.18.0
Page title: Google
HTTP status: 200 · text/html; charset=ISO-8859-1
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Nov 17 22: · subject CN=anakonda.avtandil.be
HTTP requests captured: 38 · cookies set: 1 · outgoing links: 24
Scan tier: standard · observed 2026-08-21 00:32:08 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Loads brand CDN/logo assets while hosted off-brand
Certificate issued < 48h ago

Detected technologies

Nginx

Contacted infrastructure

52.58.199.228 - AS16509 A100 ROW GmbH (Germany)
172.217.25.195 - AS15169 Google LLC (Malaysia)
172.217.25.163 - AS15169 Google LLC (Japan)

Observed indicators

google.avtandil.be
mail.example.com
www.example.com
www.google.de
ssl.gstatic.com
accounts.example.com
fonts.gstatic.com
www.gstatic.com
ogads-pa.clients6.example.com
play.google.com
52.58.199.228
172.217.25.195
172.217.25.163
https://google.avtandil.be/
https://google.avtandil.be/images/nav_logo229.png
https://mail.example.com/mail/&ogbl
https://www.example.com/imghp?hl=de&ogbl
https://www.google.de/intl/de/about/products
https://ssl.gstatic.com/gb/images/bar/al-icon.png
https://accounts.example.com/ServiceLogin?hl=de&passive=true&continue=https://www.example.com/&ec=GAZAmgQ

Questions about google.avtandil.be

Is google.avtandil.be safe?: The scan of google.avtandil.be on 21 Aug 2026 reached no verdict either way (score 18). Too little was captured to judge it, which is an unknown rather than a pass.
How was google.avtandil.be checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of google.avtandil.be

Scanned on MalwareAnalyzer by Cyble · Open interactive scan