Is lyceebelair.es safe?

The scan of lyceebelair.es on 23 Aug 2026 reached no verdict either way (score -2). Too little was captured to judge it, which is an unknown rather than a pass.

How was lyceebelair.es checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

lyceebelair.es - URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned lyceebelair.es and returned a unknown verdict (score -2), categorised as credential-harvest. The page resolved to 37.187.74.228 on OVH SAS in FR. 10 domains and 2 IPs were contacted, over 18 HTTP requests. The request followed 1 redirect before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -2) · Confidence 8%
Scanned URL: http://ecole-belair.com/ecole/file/fifaxurukure.pdf
Domain: lyceebelair.es · IP: 37.187.74.228 · AS16276 · FR
Server: nginx
Page title: Page non trouvée – Lycée International BEL AIR
HTTP status: 404 · text/html; charset=UTF-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Nov 8 06: · subject CN=lyceebelair.es
HTTP requests captured: 18
Scan tier: standard · observed 2026-08-23 22:25:18 UTC

Redirect chain

http://ecole-belair.com/ecole/file/fifaxurukure.pdf
https://lyceebelair.es/ecole/file/fifaxurukure.pdf

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post
Credential-harvesting form

Detected technologies

Nginx
WordPress
Google Analytics
jQuery

Contacted infrastructure

37.187.74.228 - AS16276 OVH SAS (France)
151.80.162.105 - AS16276 Telematic Solucions Informatiques SL Telematic Solucions Informatiques SL (France)

Observed indicators

lyceebelair.es
gmpg.org
www.googletagmanager.com
1340039p.index-education.net
www.instagram.com
www.facebook.com
www.youtube.com
aefe.gouv.fr
french-international-schools.com
www.lyceebelair.es
37.187.74.228
151.80.162.105
https://lyceebelair.es/ecole/file/fifaxurukure.pdf
https://gmpg.org/xfn/11
https://www.googletagmanager.com/
https://lyceebelair.es/feed/
https://lyceebelair.es/comments/feed/
https://lyceebelair.es/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/css/main.css?ver=4.38
https://lyceebelair.es/wp-includes/css/dist/block-library/style.min.css?ver=7.1
https://lyceebelair.es/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.4

Other scans of lyceebelair.es (1)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

23 Aug 2026 - unknown

Questions about lyceebelair.es

Is lyceebelair.es safe?: The scan of lyceebelair.es on 23 Aug 2026 reached no verdict either way (score -2). Too little was captured to judge it, which is an unknown rather than a pass.
How was lyceebelair.es checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of lyceebelair.es

Scanned on MalwareAnalyzer by Cyble · Open interactive scan