Is sentinels.ro safe?

The scan of sentinels.ro on 20 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with sentinels.ro?

4 analysed samples communicate with this URL, including Phishing.

How was sentinels.ro checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

sentinels.ro - URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned sentinels.ro and returned a unknown verdict (score -12). The page resolved to 85.9.47.129 on Claus Web srl in RO. 3 domains and 1 IP were contacted. 4 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -12) · Confidence 15%
Scanned URL: https://sentinels.ro/userfiles/file/93178670551.pdf
Domain: sentinels.ro · IP: 85.9.47.129 · AS5606 · RO
Page title: Error 403 - Forbidden
HTTP status: 403 · text/html
TLS issuer: C=US, O=Let's Encrypt, CN=YE1 · valid to Nov 13 21: · subject CN=*.sentinels.ro
Scan tier: standard · observed 2026-08-20 18:11:33 UTC

Malware communicating with this URL (4)

These samples were observed contacting or being served from sentinels.ro. Each links to its full analysis.

Phishing - referenced · 83eef3435a62f70e1c6dae772c54710c · first seen 2026-08-20
Phishing - referenced · cb9403a994b1e5c8f7f5efbf6e69458b · first seen 2026-08-12
Phishing - referenced · 0d07e0d2216c25730d6956e174073484 · first seen 2026-08-12
Phishing - referenced · d30729955ca35d81046eee2d5cc393a8 · first seen 2026-08-12

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Contacted infrastructure

85.9.47.129 - AS5606 Claus Web srl (Romania)

Observed indicators

sentinels.ro
cdnjs.cloudflare.com
www.clausweb.ro
85.9.47.129
https://sentinels.ro/userfiles/file/93178670551.pdf
https://cdnjs.cloudflare.com/ajax/libs/normalize/5.0.0/normalize.min.css
https://sentinels.ro/userfiles/file/style.css
https://www.clausweb.ro/intrebari-frecvente/ce-inseamna-error-403-forbidden/

Other scans of sentinels.ro (3)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

12 Aug 2026 - unknown · https://sentinels.ro/userfiles/file/busorakivurinexobin.pdf
12 Aug 2026 - unknown · https://sentinels.ro/userfiles/file/busorakivurinexobin.pdf
12 Aug 2026 - unknown · https://sentinels.ro/userfiles/file/napubajas.pdf

Questions about sentinels.ro

Is sentinels.ro safe?: The scan of sentinels.ro on 20 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with sentinels.ro?: 4 analysed samples communicate with this URL, including Phishing.
How was sentinels.ro checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of sentinels.ro

Scanned on MalwareAnalyzer by Cyble · Open interactive scan