indaroa.vu - URL scan, 30 Jul 2026
MalwareAnalyzer by Cyble scanned indaroa.vu and returned a unknown verdict (score -12). The page resolved to 104.21.52.222. 4 domains and 3 IPs were contacted, over 5 HTTP requests. This is a point-in-time observation from 30 Jul 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://indaroa.vu/proposal/Sign/i.html - Domain: indaroa.vu · IP: 104.21.52.222
- Server: cloudflare
- HTTP status: 520 · text/plain; charset=UTF-8
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Sep 23 16: · subject CN=indaroa.vu
- HTTP requests captured: 5 · outgoing links: 2
- Scan tier: standard · observed 2026-07-30 03:30:12 UTC
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Observed indicators
- indaroa.vu
- static.cloudflareinsights.com
- api.ipify.org
- ipapi.co
- 104.21.52.222
- 104.16.80.73
- 172.67.74.152
- https://indaroa.vu/proposal/Sign/i.html
Questions about indaroa.vu
- Is indaroa.vu safe?
- The scan of indaroa.vu on 30 Jul 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- How was indaroa.vu checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of indaroa.vu
Scanned on MalwareAnalyzer by Cyble · Open interactive scan