Is www.eusousantarosa.com.br safe?

No. MalwareAnalyzer scanned www.eusousantarosa.com.br on 23 Aug 2026 and returned a suspicious verdict with a score of 34 out of 100. Treat it as hostile until it is re-checked.

How was www.eusousantarosa.com.br checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.eusousantarosa.com.br - suspicious URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned www.eusousantarosa.com.br and returned a suspicious verdict (score 34). The page resolved to 99.83.169.22 on Amazon.com, Inc. in US. 20 domains and 3 IPs were contacted, over 3 HTTP requests. The request followed 2 redirects before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 34) · Confidence 43%
Scanned URL: http://colegiosantarosa.com/uploads/imagem/file/97341584160.pdf
Domain: www.eusousantarosa.com.br · IP: 99.83.169.22 · AS16509 · US
Server: nginx
Page title: Page not found
HTTP status: 404 · text/html;charset=utf-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 14 01: · subject CN=www.eusousantarosa.com.br
HTTP requests captured: 3
Scan tier: standard · observed 2026-08-23 04:34:56 UTC

Redirect chain

http://colegiosantarosa.com/uploads/imagem/file/97341584160.pdf
http://eusousantarosa.com.br/uploads/imagem/file/97341584160.pdf
https://www.eusousantarosa.com.br/uploads/imagem/file/97341584160.pdf

Antivirus & YARA (1 of 48 engines)

YARA: JPCERT/CC [yara]: JPCERT_LODEINFO (page content)

These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.

Why this verdict

Antivirus/YARA detection in page content: JPCERT_LODEINFO
Valid TLS, no impersonation or off-origin credential post
Cross-host redirect chain

Detected technologies

Nginx
Google Analytics

Contacted infrastructure

99.83.169.22 - AS16509 Amazon.com, Inc. (United States)
186.202.157.79 - AS27715 Locaweb Serviços de Internet S/A (Brazil)
100.24.208.97 - AS14618 Amazon Data Services NoVa (United States)

Observed indicators

www.eusousantarosa.com.br
irp.cdn-website.com
static.cdn-website.com
www.googletagmanager.com
www.facebook.com
www.flickr.com
facebook.com
instagram.com
youtube.com
wa.me
lirp.cdn-website.com
irp-cdn.multiscreensite.com
eusousantarosa.com.br
portal.escoladainteligencia.com.br
colaborador.eusousantarosa.com.br
www.positivoon.com.br
santarosadelima.qmagico.com.br
system.eusousantarosa.com.br
twitter.com
www.4pix.com.br

Questions about www.eusousantarosa.com.br

Is www.eusousantarosa.com.br safe?: No. MalwareAnalyzer scanned www.eusousantarosa.com.br on 23 Aug 2026 and returned a suspicious verdict with a score of 34 out of 100. Treat it as hostile until it is re-checked.
How was www.eusousantarosa.com.br checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.eusousantarosa.com.br

Scanned on MalwareAnalyzer by Cyble · Open interactive scan