The scan of c.ua on 23 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with c.ua?

7 analysed samples communicate with this URL.

How was c.ua checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

c.ua - URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned c.ua and returned a unknown verdict (score -12). The page resolved to 185.104.45.66 on Hosting Ukraine LTD in UA. 2 domains and 1 IP were contacted. 7 malware samples communicate with this URL. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -12) · Confidence 15%
Scanned URL: https://c.ua/
Domain: c.ua · IP: 185.104.45.66 · AS200000 · UA
Server: nginx
HTTP status: 200 · text/html; charset=UTF-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Oct 20 03: · subject CN=www.c.ua
Scan tier: fast · observed 2026-08-23 21:43:31 UTC

Malware communicating with this URL (7)

These samples were observed contacting or being served from c.ua. Each links to its full analysis.

0fb1dd0340d56a14f0d7585296f905a5a3f989a0e9813723134727b90453631b - referenced · 0fb1dd0340d56a14f0d7585296f905a5 · first seen 2026-08-23
f.txt - referenced · 5c4ece1f1a97a6ff05e1622f544e1b58 · first seen 2026-08-19
f.txt - referenced · 71f8db09aec8b4eb26c6a884d4bf2f98 · first seen 2026-08-17
f.txt - referenced · 8e3a58508731d3d50693b9eefa594ea7 · first seen 2026-08-17
f.txt - referenced · c01b9893f4c530487a994412dfebbf68 · first seen 2026-08-15
f.txt - referenced · 0a51831b781627f061f6dce695c18a5c · first seen 2026-08-14
3432011497-widgets.js - referenced · 645849c850c103e72d0365d4ead1d3fb · first seen 2026-08-13

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Detected technologies

Nginx

Contacted infrastructure

185.104.45.66 - AS200000 Hosting Ukraine LTD (Ukraine)

Observed indicators

c.ua
t.me
185.104.45.66
https://c.ua/
https://c.ua/style.css
https://t.me/anton_skliar/
https://c.ua/edge.toso@gmail.com

Questions about c.ua

Is c.ua safe?: The scan of c.ua on 23 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with c.ua?: 7 analysed samples communicate with this URL.
How was c.ua checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of c.ua

Scanned on MalwareAnalyzer by Cyble · Open interactive scan