Is natursany.com safe?

The scan of natursany.com on 22 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

How was natursany.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

natursany.com - URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned natursany.com and returned a unknown verdict (score 6), categorised as credential-harvest. The page resolved to 51.68.71.115 on OVH SAS in FR. 7 domains and 1 IP were contacted, over 20 HTTP requests. The request followed 1 redirect before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 12%
Scanned URL: https://www.natursany.com/ckfinder/userfiles/files/12707433577.pdf
Domain: natursany.com · IP: 51.68.71.115 · AS16276 · FR
Server: Apache
Page title: Error 404
HTTP status: 404 · text/html; charset=utf-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Oct 11 09: · subject CN=natursany.com
HTTP requests captured: 20
Scan tier: standard · observed 2026-08-22 13:46:22 UTC

Redirect chain

https://www.natursany.com/ckfinder/userfiles/files/12707433577.pdf
https://natursany.com/ckfinder/userfiles/files/12707433577.pdf

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Valid TLS, no impersonation or off-origin credential post

Detected technologies

Apache
jQuery

Contacted infrastructure

51.68.71.115 - AS16276 OVH SAS (France)

Observed indicators

natursany.com
fonts.googleapis.com
www.paypal.com
www.facebook.com
www.instagram.com
api.whatsapp.com
web.whatsapp.com
51.68.71.115
https://natursany.com/ckfinder/userfiles/files/12707433577.pdf
https://natursany.com/img/favicon.ico?1689926291
https://fonts.googleapis.com/css?family=Rasa:300,400,500,600,700&display=swap
https://fonts.googleapis.com/css?family=Cormorant+Garamond:300,400,500,600,700&display=swap
https://natursany.com/themes/Lauder/assets/css/theme.css
https://natursany.com/themes/Lauder/assets/css/font-awesome.css
https://natursany.com/modules/blockreassurance/views/dist/front.css
https://natursany.com/modules/ps_socialfollow/views/css/ps_socialfollow.css
https://natursany.com/themes/Lauder/modules/ps_searchbar/ps_searchbar.css
https://natursany.com/modules/homepagetabs/views/css/homepagetabs.css
https://natursany.com/modules/ets_whatsapp/views/css/front.css
https://natursany.com/modules/czsalenotification//views/css/front.css

Questions about natursany.com

Is natursany.com safe?: The scan of natursany.com on 22 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
How was natursany.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of natursany.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan