The scan of henca.com on 19 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with henca.com?

2 analysed samples communicate with this URL, including Phishing.

How was henca.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

henca.com - URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned henca.com and returned a unknown verdict (score 6). The page resolved to 172.67.161.171 on Cloudflare, Inc. in US. 2 domains and 1 IP were contacted, over 1 HTTP request. 2 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: http://henca.com/files/details/file/42699710502.pdf
Domain: henca.com · IP: 172.67.161.171 · AS13335 · US
Server: cloudflare
Page title: Not Found
HTTP status: 404 · text/html; charset=UTF-8
HTTP requests captured: 1
Scan tier: standard · observed 2026-08-19 18:05:25 UTC

Malware communicating with this URL (2)

These samples were observed contacting or being served from henca.com. Each links to its full analysis.

Phishing - referenced · 54c5ab214efd565e17d8ab292d052d45 · first seen 2026-08-19
Phishing - referenced · f4f7616d4a53a79b0a2a4ca3716d6437 · first seen 2026-08-14

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Served over plaintext HTTP

Detected technologies

Cloudflare
PHP
Cloudflare Insights

Contacted infrastructure

172.67.161.171 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

henca.com
static.cloudflareinsights.com
172.67.161.171
http://henca.com/files/details/file/42699710502.pdf
https://static.cloudflareinsights.com/beacon.min.js/v4513226cdae34746b4dedf0b4dfa099e1781791509496

Other scans of henca.com (5)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

19 Aug 2026 - unknown
19 Aug 2026 - unknown
19 Aug 2026 - unknown
14 Aug 2026 - unknown · http://henca.com/files/details/file/14796337199.pdf
14 Aug 2026 - unknown · http://henca.com/files/details/file/14796337199.pdf

Questions about henca.com

Is henca.com safe?: The scan of henca.com on 19 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with henca.com?: 2 analysed samples communicate with this URL, including Phishing.
How was henca.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of henca.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan