www.rocha.pt - URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned www.rocha.pt and returned a unknown verdict (score -12). The page resolved to 130.185.83.236 on ALMOUROLTEC - Lda dba PTisp in PT. 10 domains and 1 IP were contacted, over 5 HTTP requests. The request followed 1 redirect before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://rocha.pt/userfiles/file/kewafobejo.pdf - Domain: www.rocha.pt · IP: 130.185.83.236 · AS24768 · PT
- Server: nginx
- Page title: Cisternas, Reboque e Alfaias | Metalúrgica Rocha
- HTTP status: 200 · text/html; charset=UTF-8
- TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Nov 8 22: · subject CN=*.rocha.pt
- HTTP requests captured: 5
- Scan tier: standard · observed 2026-08-20 23:25:32 UTC
Redirect chain
https://rocha.pt/userfiles/file/kewafobejo.pdfhttps://www.rocha.pt/
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Nginx
- PHP
- Google Analytics
- Bootstrap
Contacted infrastructure
- 130.185.83.236 - AS24768 ALMOUROLTEC - Lda dba PTisp (Portugal)
Observed indicators
- www.rocha.pt
- www.googletagmanager.com
- www.facebook.com
- www.instagram.com
- www.youtube.com
- www.livroreclamacoes.pt
- www.linkage.pt
- fonts.googleapis.com
- fonts.gstatic.com
- www.google.com
- 130.185.83.236
- https://www.rocha.pt/
- https://www.rocha.pt/apple-touch-icon.png
- https://www.googletagmanager.com/gtag/js?id=G-MQ5B82131D
- https://www.rocha.pt/imagens/logo.svg
- https://www.rocha.pt/pesquisa
- https://www.rocha.pt/?lang=en
- https://www.rocha.pt/quem-somos
- https://www.rocha.pt/produtos/cisternas
- https://www.rocha.pt/produtos/reboques
Questions about www.rocha.pt
- Is www.rocha.pt safe?
- The scan of www.rocha.pt on 20 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- How was www.rocha.pt checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.rocha.pt
Scanned on MalwareAnalyzer by Cyble · Open interactive scan