Is helices-evra.com safe?

The scan of helices-evra.com on 8 Aug 2026 reached no verdict either way (score 5). Too little was captured to judge it, which is an unknown rather than a pass.

How was helices-evra.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

helices-evra.com - URL scan, 8 Aug 2026

MalwareAnalyzer by Cyble scanned helices-evra.com and returned a unknown verdict (score 5), categorised as credential-harvest. The page resolved to 191.96.63.63. 5 domains and 1 IP were contacted, over 16 HTTP requests. This is a point-in-time observation from 8 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 5) · Confidence 14%
Scanned URL: https://helices-evra.com/userfiles/file/venezilewezorodon.pdf
Domain: helices-evra.com · IP: 191.96.63.63
Server: LiteSpeed
Page title: Hélices d'avion et d'ULM sur mesure - Production Evra
HTTP status: 200 · text/html; charset=UTF-8
TLS issuer: C=US, O=Let's Encrypt, CN=YE1 · valid to Sep 14 18: · subject CN=helices-evra.com
HTTP requests captured: 16
Scan tier: standard · observed 2026-08-08 04:19:25 UTC

Why this verdict

Valid TLS, no impersonation or off-origin credential post
Credential-harvesting form
Matches phishing-kit family "CryptoDrainer"

Observed indicators

helices-evra.com
cdn-cookieyes.com
stats.wp.com
www.youtube.com
fr.wikipedia.org
191.96.63.63
https://helices-evra.com/
https://helices-evra.com/xmlrpc.php
https://cdn-cookieyes.com/client_data/d1ace42ef5b44ee057881fb2/script.js
https://stats.wp.com/
https://helices-evra.com/feed/
https://helices-evra.com/comments/feed/
https://helices-evra.com/wp-content/plugins/formidable/css/formidableforms.css?ver=6261357
https://helices-evra.com/wp-content/plugins/all-in-one-seo-pack/dist/Lite/assets/css/table-of-contents/global.e90f6d47.css?ver=4.9.9
https://helices-evra.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
https://helices-evra.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.4.9
https://helices-evra.com/wp-content/et-cache/14/et-divi-dynamic-14.css?ver=1785760748
https://helices-evra.com/wp-content/plugins/supreme-modules-pro-for-divi/styles/style.min.css?ver=4.9.66
https://helices-evra.com/wp-content/plugins/wpforms-lite/assets/css/integrations/divi/choices.min.css?ver=10.2.0
https://helices-evra.com/wp-content/themes/Divi/includes/builder/feature/dynamic-assets/assets/css/magnific_popup.css?ver=4.9.66

Other scans of helices-evra.com (5)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

23 Aug 2026 - unknown
17 Aug 2026 - unknown
17 Aug 2026 - unknown
16 Aug 2026 - unknown
16 Aug 2026 - unknown

Questions about helices-evra.com

Is helices-evra.com safe?: The scan of helices-evra.com on 8 Aug 2026 reached no verdict either way (score 5). Too little was captured to judge it, which is an unknown rather than a pass.
How was helices-evra.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of helices-evra.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan