Is www.guowangcable.com safe?

No. MalwareAnalyzer scanned www.guowangcable.com on 20 Aug 2026 and returned a suspicious verdict with a score of 44 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.

How was www.guowangcable.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.guowangcable.com - suspicious URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned www.guowangcable.com and returned a suspicious verdict (score 44), categorised as credential-harvest. The page resolved to 43.166.249.134 on ACEVILLE PTE.LTD. in US. The domain was registered 4028 days ago through Alibaba Cloud Computing (Beijing) Co., Ltd.. 9 domains and 1 IP were contacted, over 3 HTTP requests. The request followed 2 redirects before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 44) · Confidence 56%
Scanned URL: http://guowangcable.com/d/files/vuvatebewozirizosaz.pdf
Domain: www.guowangcable.com · IP: 43.166.249.134 · AS132203 · US
Server: nginx
Page title: Page not foundGuowang Cable Group
HTTP status: 404 · text/html; charset=UTF-8
Registrar: Alibaba Cloud Computing (Beijing) Co., Ltd. · domain age 4028 days · created 2015-08-10
TLS issuer: C=CN, O=WoTrus CA Limited, CN=WoTrus RSA DV SSL CA 2 · valid to Mar 3 23: · subject CN=www.guowangcable.com
HTTP requests captured: 3
Scan tier: standard · observed 2026-08-20 10:06:15 UTC

Redirect chain

http://guowangcable.com/d/files/vuvatebewozirizosaz.pdf
https://guowangcable.com/d/files/vuvatebewozirizosaz.pdf
https://www.guowangcable.com/d/files/vuvatebewozirizosaz.pdf

Antivirus & YARA (1 of 47 engines)

YARA: ESET research [yara]: IIS_Group10 (page content)

These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.

Why this verdict

Antivirus/YARA detection in page content: IIS_Group10
Valid TLS, no impersonation or off-origin credential post
Credential-harvesting form
Cross-host redirect chain

Detected technologies

Nginx
WordPress
Google Analytics
jQuery

Contacted infrastructure

43.166.249.134 - AS132203 ACEVILLE PTE.LTD. (United States)

Observed indicators

www.guowangcable.com
www.googletagmanager.com
cdn-cookieyes.com
www.facebook.com
twitter.com
www.linkedin.com
www.youtube.com
api.whatsapp.com
lr.zoosnet.net
43.166.249.134
https://www.guowangcable.com/d/files/vuvatebewozirizosaz.pdf
https://www.guowangcable.com/wp-content/themes/guowang/style.css
https://www.guowangcable.com/wp-content/themes/guowang/js/jquery.min.js
https://www.googletagmanager.com/gtm.js?id=
https://cdn-cookieyes.com/client_data/554fd42512d54c7753b3f6fa/script.js
https://www.facebook.com/guowangcable
https://twitter.com/gwcablegroup
https://www.linkedin.com/company/gwc-grp/
https://www.youtube.com/@gwcablegroup
https://www.guowangcable.com/

Other scans of www.guowangcable.com (5)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

15 Aug 2026 - unknown · https://www.guowangcable.com/d/files/4342884076.pdf
15 Aug 2026 - unknown · https://www.guowangcable.com/d/files/4342884076.pdf
15 Aug 2026 - unknown · https://www.guowangcable.com/d/files/4342884076.pdf
14 Aug 2026 - unknown · https://www.guowangcable.com/d/files/gobokakoganenegor.pdf
14 Aug 2026 - unknown · https://www.guowangcable.com/d/files/gobokakoganenegor.pdf

Questions about www.guowangcable.com

Is www.guowangcable.com safe?: No. MalwareAnalyzer scanned www.guowangcable.com on 20 Aug 2026 and returned a suspicious verdict with a score of 44 out of 100, categorised as credential-harvest. Treat it as hostile until it is re-checked.
How was www.guowangcable.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.guowangcable.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan