www.onegelha.com - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned www.onegelha.com and returned a unknown verdict (score 6). 1 domain and 0 IPs were contacted. 20 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 12%
- Scanned URL:
http://www.onegelha.com/wp-content/plugins/super-forms/uploads/php/files/eab6aee824c42f1de01e2d80017b8e13/9860114043.pdf - Domain: www.onegelha.com
- Scan tier: fast · observed 2026-08-21 19:26:57 UTC
Malware communicating with this URL (20)
These samples were observed contacting or being served from www.onegelha.com. Each links to its full analysis.
- Phishing - referenced ·
909008c769b08561a2e6ac171b3b111e· first seen 2026-08-21 - Phishing - referenced ·
c38201432024632a9b5baf31815c448e· first seen 2026-08-21 - Phishing - referenced ·
662bb36f9e7eb0a5f6d9180eff17b6da· first seen 2026-08-21 - Phishing - referenced ·
f2fd678112bbbd671d1cd03539e5d7f6· first seen 2026-08-20 - Phishing - referenced ·
8a2abd8956bda4986c87cbe59560b3a4· first seen 2026-08-17 - Phishing - referenced ·
34e1653fb94c2a5d91b649af47a8dcf1· first seen 2026-08-16 - Phishing - referenced ·
3d46c7e14350d6be22980b936f20fdb8· first seen 2026-08-15 - Phishing - referenced ·
d3d651847aec2eed4384621b23cf26a0· first seen 2026-08-15 - Phishing - referenced ·
db3468e650f3f9993e677fe5d644d0fa· first seen 2026-08-15 - Phishing - referenced ·
8853109e91daa4ff94d4b5e6e32a876d· first seen 2026-08-15 - Phishing - referenced ·
76384bf914e1fc0f9eedff3189a99924· first seen 2026-08-15 - Phishing - referenced ·
2a53ee8f431e8f64f45d35d7b079b4f7· first seen 2026-08-15 - Phishing - referenced ·
6241bbc09a0470567d272c93ac1087f9· first seen 2026-08-14 - Phishing - referenced ·
037cc201781bd332ece59ae1f3dd8c06· first seen 2026-08-14 - Phishing - referenced ·
b5ceb6c0a3e825d18cf450f54689de6a· first seen 2026-08-13
Why this verdict
- Served over plaintext HTTP
- Target did not respond (DNS/connection failure or timeout); verdict from URL structure only
Observed indicators
- www.onegelha.com
- http://www.onegelha.com/wp-content/plugins/super-forms/uploads/php/files/eab6aee824c42f1de01e2d80017b8e13/9860114043.pdf
Other scans of www.onegelha.com (6)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 17 Aug 2026 - unknown ·
http://www.onegelha.com/wp-content/plugins/super-forms/uploads/php/files/c9c0d0f078b593e8e36bf594239 - 15 Aug 2026 - unknown ·
http://www.onegelha.com/wp-content/plugins/super-forms/uploads/php/files/322092c06b433017fb761997fa0 - 15 Aug 2026 - unknown ·
http://www.onegelha.com/wp-content/plugins/super-forms/uploads/php/files/7348a7d2e2bd7226ad09ea7e190 - 14 Aug 2026 - unknown ·
http://www.onegelha.com/wp-content/plugins/super-forms/uploads/php/files/7e455efda79fff43d5e3221bc87 - 14 Aug 2026 - unknown ·
http://www.onegelha.com/wp-content/plugins/super-forms/uploads/php/files/ca11b60265a1c4413160be72f6d - 12 Aug 2026 - unknown ·
http://www.onegelha.com/wp-content/plugins/super-forms/uploads/php/files/db8c2331c54d14463135e5ad289
Questions about www.onegelha.com
- Is www.onegelha.com safe?
- The scan of www.onegelha.com on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.onegelha.com?
- 20 analysed samples communicate with this URL, including Phishing.
- How was www.onegelha.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.onegelha.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan