witnesstherealist.com - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned witnesstherealist.com and returned a unknown verdict (score 6). The page resolved to 208.91.197.132 on Confluence Networks Inc in US. The domain was registered 734 days ago through Network Solutions, LLC. 1 domain and 1 IP were contacted. 12 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 9%
- Scanned URL:
http://witnesstherealist.com/wp-content/plugins/super-forms/uploads/php/files/d5b6e603de488461866c32372bce80c9/72480013090.pdf - Domain: witnesstherealist.com · IP: 208.91.197.132 · AS40034 · US
- HTTP status: 200 · text/html
- Registrar: Network Solutions, LLC · domain age 734 days · created 2024-08-18
- Scan tier: fast · observed 2026-08-22 23:11:25 UTC
Malware communicating with this URL (12)
These samples were observed contacting or being served from witnesstherealist.com. Each links to its full analysis.
- Phishing - referenced ·
1bceee7a7ea4f76dddfda8d9359e6133· first seen 2026-08-22 - Phishing - referenced ·
7151e66bcce566d588cd759f3f1687c1· first seen 2026-08-22 - Phishing - referenced ·
a98a21ff8df7af3d61fdf4e32cf44dd8· first seen 2026-08-21 - Phishing - referenced ·
7488846b229942750b129946b5b8a1d4· first seen 2026-08-17 - Phishing - referenced ·
7704fd3bd8796591ad204af63666f5ba· first seen 2026-08-17 - Phishing - referenced ·
839410c2f66c132046432b7f93df594b· first seen 2026-08-17 - Phishing - referenced ·
ec5dfd2b3cac60ed03db2fee54d4ff31· first seen 2026-08-16 - Phishing - referenced ·
53692b990cd3baf3d0fdf4b24744d22b· first seen 2026-08-15 - Phishing - referenced ·
ba9b9ae680150d6f4bbbd8c12a9a772a· first seen 2026-08-15 - Phishing - referenced ·
3ef6b4e7a0a89658cfd9cdbcc5e62563· first seen 2026-08-14 - Phishing - referenced ·
d27887daa64b50d2795920383ab79533· first seen 2026-08-14 - Phishing - referenced ·
2be55340e84f543c84fa4cf200b1dc45· first seen 2026-08-14
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Served over plaintext HTTP
Contacted infrastructure
- 208.91.197.132 - AS40034 Confluence Networks Inc (United States)
Observed indicators
- witnesstherealist.com
- 208.91.197.132
- http://witnesstherealist.com/wp-content/plugins/super-forms/uploads/php/files/d5b6e603de488461866c32372bce80c9/72480013090.pdf
Questions about witnesstherealist.com
- Is witnesstherealist.com safe?
- The scan of witnesstherealist.com on 22 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with witnesstherealist.com?
- 12 analysed samples communicate with this URL, including Phishing.
- How was witnesstherealist.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of witnesstherealist.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan