www.demetagras.com - URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned www.demetagras.com and returned a unknown verdict (score 0). The page resolved to 178.157.8.3 on AEROTEK-MNT in TR. The domain was registered 3614 days ago through ODTU Gelistirme Vakfi Bilgi Teknolojileri Sanayi Ve Ticaret Anonim Sirketi. 12 domains and 1 IP were contacted, over 5 HTTP requests. 4 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 0%
- Scanned URL:
https://www.demetagras.com/wp-content/plugins/formcraft/file-upload/server/content/files/1607d5b8dc5503---8719222311.pdf - Domain: www.demetagras.com · IP: 178.157.8.3 · AS42807 · TR
- Server: Apache
- Page title: Op. Dr. Demet Ağras - Genel Cerrahi
- HTTP status: 200 · text/html; charset=UTF-8
- Registrar: ODTU Gelistirme Vakfi Bilgi Teknolojileri Sanayi Ve Ticaret Anonim Sirketi · domain age 3614 days · created 2016-09-26
- HTTP requests captured: 5
- Scan tier: fast · observed 2026-08-20 02:41:10 UTC
Redirect chain
https://www.demetagras.com/wp-content/plugins/formcraft/file-upload/server/content/files/1607d5b8dc5503---8719222311.pdfhttps://www.demetagras.com/
Malware communicating with this URL (4)
These samples were observed contacting or being served from www.demetagras.com. Each links to its full analysis.
- Phishing - referenced ·
b06489462a8d808669503340428eccfd· first seen 2026-08-20 - Phishing - referenced ·
00880dcbace449c909565282369c5f9b· first seen 2026-08-17 - Phishing - referenced ·
391b2545dfc8d702b52bbe5b4f7cf1bc· first seen 2026-08-14 - Phishing - referenced ·
a27d391dff10ed6c199d2b6b4192ae52· first seen 2026-08-12
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Detected technologies
- Apache
- PHP
- Google Analytics
Contacted infrastructure
- 178.157.8.3 - AS42807 AEROTEK-MNT (TR)
Observed indicators
- www.demetagras.com
- fonts.googleapis.com
- code.jquery.com
- cdnjs.cloudflare.com
- fonts.gstatic.com
- www.googletagmanager.com
- www.facebook.com
- www.instagram.com
- open.spotify.com
- maps.app.goo.gl
- www.dijitalsaglikajansi.com
- wa.me
- 178.157.8.3
- https://www.demetagras.com/
- https://www.demetagras.com/2023/05/thumbnail/undefinedpng-128x128.png
- https://www.demetagras.com/2023/05/thumbnail/undefinedpng-57x57.png
- https://www.demetagras.com/2023/05/thumbnail/undefinedpng-72x72.png
- https://fonts.googleapis.com/
- https://code.jquery.com/
- https://cdnjs.cloudflare.com/
Other scans of www.demetagras.com (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 17 Aug 2026 - unknown
- 14 Aug 2026 - unknown ·
https://www.demetagras.com/wp-content/plugins/formcraft/file-upload/server/content/files/1608245ba83
Questions about www.demetagras.com
- Is www.demetagras.com safe?
- The scan of www.demetagras.com on 20 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.demetagras.com?
- 4 analysed samples communicate with this URL, including Phishing.
- How was www.demetagras.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.demetagras.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan