visualpaint.com - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned visualpaint.com and returned a unknown verdict (score 6). The page resolved to 34.174.212.37 on Google LLC in US. The domain was registered 6269 days ago through GoDaddy.com, LLC. 4 domains and 1 IP were contacted, over 23 HTTP requests. 10 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 9%
- Scanned URL:
http://visualpaint.com/wp-content/plugins/formcraft/file-upload/server/content/files/1616559565bf07---88716565727.pdf - Domain: visualpaint.com · IP: 34.174.212.37 · AS396982 · US
- Server: nginx
- Page title: Page not found | visualpaint
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: GoDaddy.com, LLC · domain age 6269 days · created 2009-06-22
- HTTP requests captured: 23
- Scan tier: fast · observed 2026-08-21 07:36:48 UTC
Malware communicating with this URL (10)
These samples were observed contacting or being served from visualpaint.com. Each links to its full analysis.
- Phishing - referenced ·
f3c0d8ed2a303c2d19f1a5e612eea21d· first seen 2026-08-21 - Phishing - referenced ·
abf8fd50abd52a8d0fe5d068e64b1bc3· first seen 2026-08-20 - Phishing - referenced ·
cf1239b3788587505fa8e04eb2601aa0· first seen 2026-08-19 - Phishing - referenced ·
e94ecc78cd9f06eda5c269b5081ac1c8· first seen 2026-08-19 - 13333a025a13e5d32cc6c469909387f61d23b6f2b7500ad27f9a2f0a671e3721 - referenced ·
13333a025a13e5d32cc6c469909387f6· first seen 2026-08-17 - Phishing - referenced ·
aa3861e6a3caf08405b367b9b846187f· first seen 2026-08-15 - Phishing - referenced ·
48fe699446f170c786645c178886794d· first seen 2026-08-13 - Phishing - referenced ·
ddf5ca67dddfe6f50c11ebc8966fce60· first seen 2026-08-13 - Phishing - referenced ·
6b69b49982bbeed4605a371c629fe71e· first seen 2026-08-12 - Phishing - referenced ·
00a7fed9488c22a6e45ed1aceb82ba59· first seen 2026-08-12
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Served over plaintext HTTP
Detected technologies
- Nginx
- WordPress
- jQuery
Contacted infrastructure
- 34.174.212.37 - AS396982 Google LLC (United States)
Observed indicators
- visualpaint.com
- fonts.googleapis.com
- i0.wp.com
- stats.wp.com
- 34.174.212.37
- http://visualpaint.com/wp-content/plugins/formcraft/file-upload/server/content/files/1616559565bf07---88716565727.pdf
- http://fonts.googleapis.com/
- http://i0.wp.com/
- https://visualpaint.com/feed/
- https://visualpaint.com/comments/feed/
- http://visualpaint.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.7
- http://visualpaint.com/wp-content/plugins/formcraft3-4/dist/formcraft-common.css?ver=3.9.16
- http://visualpaint.com/wp-content/plugins/formcraft3-4/dist/form.css?ver=3.9.16
- http://visualpaint.com/wp-content/plugins/weekly-class/assets/front/css/timetable.css?ver=2.8.1
- http://visualpaint.com/wp-content/plugins/content-protector/assets/public/passster-public.min.css?ver=4.3.9
- http://visualpaint.com/wp-content/themes/salient/css/font-awesome-legacy.min.css?ver=4.7.1
- http://visualpaint.com/wp-content/themes/salient/css/build/grid-system.css?ver=18.2.1
- http://visualpaint.com/wp-content/themes/salient/css/build/style.css?ver=18.2.1
- http://visualpaint.com/wp-content/themes/salient/css/build/header/header-layout-centered-bottom-bar.css?ver=18.2.1
- http://visualpaint.com/wp-content/themes/salient/css/build/elements/element-scrolling-text.css?ver=18.2.1
Other scans of visualpaint.com (1)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 19 Aug 2026 - unknown ·
http://visualpaint.com/wp-content/plugins/formcraft/file-upload/server/content/files/160820fc047314-
Questions about visualpaint.com
- Is visualpaint.com safe?
- The scan of visualpaint.com on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with visualpaint.com?
- 10 analysed samples communicate with this URL, including Phishing.
- How was visualpaint.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of visualpaint.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan