Is red.infd.edu.ar safe?
http://red.infd.edu.ar/
Coveragepartial4 of 6 applicable core capabilities
Official Argentine teacher-training portal red.infd.edu.ar is serving injected gambling spam and carries adverse antivirus detections
red.infd.edu.ar presents itself as the official network of nodes for Argentina's National Institute of Teacher Training, with a contact email on its own domain and a listed phone number. However, the page also contains a block of links to unrelated international gambling and betting domains, and a saved antivirus observation records adverse results from two independent engine families. The combination of a legitimate-looking government education portal with injected gambling links and adverse security detections is the signature of a compromised site, not a normal educational resource. Visitors should treat the domain as untrustworthy until the operator confirms cleanup.
Be the first to review red.infd.edu.ar
Lost money to red.infd.edu.ar? Warn others
Did you use red.infd.edu.ar?
Loading saved screenshot
Preparing the saved page preview.
Follow red.infd.edu.ar
Get a notification in your MalwareTips bell when new reviews arrive (one digest a day at most), when the verdict changes after a rescan, and when MalwareTips or the verified site owner replies. Unfollow any time.
Where this site sits
- Dangerous1–20
- High Risk21–44
- Moderate Risk45–69
- Low Risk70–84
- Safe85–100
The score combines saved evidence strength and analysis quality. Coverage is reported separately.
01 · Investigation Brief
Investigation Brief
red.infd.edu.ar presents itself as the official network of nodes for Argentina's National Institute of Teacher Training, with a contact email on its own domain and a listed phone number. However, the page also contains a block of links to unrelated international gambling and betting domains, and a saved antivirus observation records adverse results from two independent engine families. The combination of a legitimate-looking government education portal with injected gambling links and adverse security detections is the signature of a compromised site, not a normal educational resource. Visitors should treat the domain as untrustworthy until the operator confirms cleanup.
Injected gambling links on an education portal
The page content includes a run of short text blocks that are the names of gambling and betting brands: onwin, melbet, elexbet, bahsine, jokerbet, heybet, mariobet, betist, bettilt, betandyou and kareasbet. These appear alongside a block reading ARGENTINA, which is consistent with the site's stated role as an Argentine national education network. Gambling brand names have no legitimate place on a teacher-training portal, and their presence is the strongest single indicator that the site's content has been altered by a third party.
The commercial link graph confirms that these brand names resolve to external hosts that are not part of the education domain: onwin100.com, pazzers.info, elexbet20.com, bahisi.info, jokerbet01.com, heybum.com, mariobetgiris1.info, betists.com, betxilt.com, geldik.info and kareasbet.org. A visitor clicking any of these would leave the government portal and land on an unrelated gambling site. The graph records no explicit monetization flag on these links, so the pattern is best described as injected spam rather than a declared affiliate arrangement.
Technical detections versus operator identity
A saved antivirus observation records that two independent engine families returned an adverse result for this domain. That observation is described as stale, so it should be treated as a real but time-limited signal rather than a live verdict. The browser threat feed returned no threat warning and the saved TLS check found a valid encrypted connection, which means the site is not currently flagged as a phishing or malware host by those services. The adverse antivirus result and the injected gambling content together outweigh the clean checks.
On the operator side, the site presents itself as the official network of nodes for the National Institute of Teacher Training, with a contact email on its own domain and a listed phone number. Those are consistent with a genuine institutional presence, and they are the reason this is scored as a compromised legitimate site rather than a purpose-built scam. The operator has not disclosed a registration ID on the page, and the off-domain email domain educacion.gob.ar points to the parent ministry rather than to the site itself. None of this proves the operator is acting in bad faith; it does mean the site's current content cannot be trusted.
Why the score is 38
2 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing. Coverage remains separate so missing sources cannot be mistaken for clean results.
02 · Security Evidence
Security evidence
Antivirus Engines
3/ 92
detectionsSaved analysis from July 16, 2026 - stale
3 engines flagged this URL
Every saved adverse engine is listed below. The full provider matrix remains available for audit.
- Malicious
- 2
- Suspicious
- 1
- Total
- 92
| Engine | Finding |
|---|---|
| CRDFMalicious | malicious |
| NetcraftMalicious | malicious |
| Forcepoint ThreatSeekerSuspicious | suspicious |
All 92 engine results
- CRDF - Malicious
- Netcraft - Malicious
- Forcepoint ThreatSeeker - Suspicious
- 0xSI_f33d - Unrated
- Abusix - Clean
- Acronis - Clean
- ADMINUSLabs - Clean
- AILabs (MONITORAPP) - Clean
- AlienVault - Clean
- alphaMountain.ai - Unrated
- AlphaSOC - Unrated
- Antiy-AVL - Clean
- ArcSight Threat Intelligence - Unrated
- AutoShun - Unrated
- Bfore.Ai PreCrime - Unrated
- BitDefender - Clean
- Bkav - Unrated
- BlockList - Clean
- Blueliv - Clean
- Certego - Clean
- ChainPatrol - Unrated
- Chong Lua Dao - Unrated
- CINS Army - Clean
- Cluster25 - Unrated
- Criminal IP - Clean
- CSIS Security Group - Unrated
- CTX AI - Clean
- Cyan - Unrated
- Cyble - Clean
- CyRadar - Clean
- desenmascara.me - Clean
- DNS8 - Unrated
- Dr.Web - Clean
- EmergingThreats - Clean
- Emsisoft - Clean
- Ermes - Unrated
- ESET - Clean
- ESTsecurity - Clean
- Fortinet - Clean
- Fortra - Unrated
- G-Data - Clean
- GCP Abuse Intelligence - Unrated
- Google Safe Browsing - Clean
- GreenSnow - Clean
- GreyNoise - Unrated
- Gridinsoft - Unrated
- Guardpot - Unrated
- Heimdal Security - Clean
- Hunt.io Intelligence - Unrated
- IPsum - Clean
- Juniper Networks - Clean
- K7AntiVirus - Unrated
- Kaspersky - Clean
- LevelBlue - Clean
- Lionic - Clean
- Lumu - Unrated
- Malwared - Clean
- MalwarePatrol - Clean
- MalwareURL - Unrated
- Mimecast - Unrated
- OpenPhish - Clean
- PhishFort - Unrated
- Phishing Database - Clean
- Phishtank - Clean
- PREBYTES - Clean
- PrecisionSec - Unrated
- Quick Heal - Clean
- Quttera - Clean
- Rising - Clean
- SafeToOpen - Unrated
- Sangfor - Clean
- Sansec eComscan - Unrated
- Scantitan - Clean
- SCUMWARE.org - Clean
- Seclookup - Clean
- Snort IP sample list - Unrated
- SOCRadar - Unrated
- Sophos - Clean
- StopForumSpam - Clean
- Sucuri SiteCheck - Clean
- ThreatHive - Clean
- URLhaus - Clean
- URLQuery - Unrated
- Viettel Threat Intelligence - Clean
- VIPRE - Unrated
- ViriBack - Clean
- VX Vault - Clean
- Webroot - Clean
- Xcitium Verdict Cloud - Clean
- Yandex Safebrowsing - Clean
- ZeroCERT - Clean
- ZeroFox - Unrated
Security Scans
Checked against the browser threat feeds available to this scan — no hit.
What we observed
Loading saved screenshot
Preparing the saved page preview.
Visual context from the captured page
INfOD
What the captured page showed
1 observation- 01
INfOD
03 · Investigation Story
Investigation story
What the site claims
Red INFoD – Red de nodos del INFoD
What we observed
The page content was captured and checked alongside 59 antivirus results.
What independent research found
The search completed without a material external warning or corroborating report.
What remains unverified
2 of the 6 applicable core capabilities did not complete, so those gaps remain visible in the coverage ledger.
What kind of site and risk is this?
Threat category
Aggressive Ads & Malvertising
Service and business model
Content
Observed behavior
Evidence behind this classification
- 012 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
- 02The site presents itself as the official network of nodes for Argentina's National Institute of Teacher Training, with a contact email on its own domain and a listed phone number.
- 03The page contains a block of gambling and betting brand names (onwin, melbet, elexbet, bahsine, jokerbet, heybet, mariobet, betist, bettilt, betandyou, kareasbet) that are unrelated to the site's stated education mission.
If this is a scam — what it means for you
What a visitor actually experiences
A visitor arriving at red.infd.edu.ar expecting teacher-training information sees the portal's normal branding alongside a block of gambling brand names. If they click one of those names, they are taken off the education domain to an external gambling host such as betxilt.com or onwin100.com. The site itself does not appear to force a redirect, but the injected links provide a direct path from a trusted government domain to unvetted gambling sites.
If this is a scam, how it works
The evidence-backed path
Each stage below is preserved from the grounded analysis and linked to saved evidence.
Because the domain also carries an adverse antivirus result, a visitor who trusts the government branding and interacts with the page may be exposed to whatever else the compromise has introduced. The saved antivirus observation is stale, so the current state of the site is uncertain, but the combination of injected gambling content and adverse detections means the domain should not be treated as a safe place to enter personal information or follow outbound links.
Avoid clicking the gambling brand links on red.infd.edu.ar and do not enter personal information on the site until the operator confirms the injected content has been removed. If you need teacher-training information from INFoD, reach the institution through its official ministry channels rather than through this domain. Report the injected gambling links to the site operator so the compromise can be cleaned up.
Web research findings
Independent findings for red.infd.edu.ar, including public complaints, named review sources, registration records, and look-alike-domain evidence. A missing result is shown as unverified, never converted into a clean bill of health.
No independently sourced scam reports or credibility records were found for red.infd.edu.ar. That is common for new or low-traffic sites and does not clear the site.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
04 · Domain & Infrastructure
Domain & infrastructure
The plumbing behind the site — who registered it, how it’s encrypted, where it’s hosted, and where it links out. A valid certificate or a calm server doesn’t mean the business is honest — scam sites pass these checks too. Use this to corroborate the verdict, not to overturn it.
Infrastructure map
How the saved page connected to the wider web.
- Domainred.infd.edu.ar
- Redirects tored.infd.edu.ar
- Hosted byARSAT - Empresa Argentina de Soluciones Satelitales S.A.
- Referencesstatic.addtoany.com · cdn.openshareweb.com
Contact Verification
Saved contact details can help identify the operator. Their presence supports traceability; it does not prove the business is trustworthy.
- Contact email on the site's own domain (parasoporte@infd.edu.ar).
- Phone number listed ((011) 4129-1000).
Domain & Encryption
Redirect Chain
- 1301http://red.infd.edu.ar/
- 2200https://red.infd.edu.ar/
Server Reputation
Referenced Domains
Outbound domains this page links to or loads resources from. Each links to its own security scan.
05 · Evidence Ledger
Evidence ledger
- Antiviruspartial
- Browser threat feedcomplete
- Page contentcomplete
- Analysiscomplete
- Visual evidencecomplete
The conclusion is supported by the evidence saved with this report.
Technical threat
suspiciousMalware, phishing, credential theft and hostile infrastructure.
2 independent antivirus families reported an adverse result. This comes from a saved antivirus observation rather than a new submission, so treat the detection as real but confirm the timing.
Operator / customer risk
suspiciousComplaints, withdrawals, business conduct and commercial traps.
The page contains a block of gambling and betting brand names (onwin, melbet, elexbet, bahsine, jokerbet, heybet, mariobet, betist, bettilt, betandyou, kareasbet) that are unrelated to the site's stated education mission.
Source coverage and freshness
Status shows whether usable evidence was saved; finding shows what that evidence observed.
| Source | Result | Completion | Finding | Freshness |
|---|---|---|---|---|
| Antivirus | 3 of 92 engines flagged | Limited | Adverse | stale fallback · analysed Jul 16, 2026 |
| Browser protection | No browser threat-list match | Completed | No adverse finding | this scan · Oct 26, 2026 |
| Page content | Page fetched · HTTP 200 | Completed | No adverse finding | this scan · Oct 26, 2026 |
| Visual evidence | 1 visible observation saved with the page capture | Completed | No adverse finding | this scan · Oct 26, 2026 |
| Independent research | The search completed without a material external finding | Completed | No adverse finding | this scan · Oct 26, 2026 |
- Antivirus
- Result3 of 92 engines flagged
- CompletionLimited
- FindingAdverse
- Freshnessstale fallback · analysed Jul 16, 2026
- Browser protection
- ResultNo browser threat-list match
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 26, 2026
- Page content
- ResultPage fetched · HTTP 200
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 26, 2026
- Visual evidence
- Result1 visible observation saved with the page capture
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 26, 2026
- Independent research
- ResultThe search completed without a material external finding
- CompletionCompleted
- FindingNo adverse finding
- Freshnessthis scan · Oct 26, 2026
07 · Safety FAQ
Safety FAQ
Common questions, answered directly from the scan data above — so the answers reflect the saved verdict and evidence in this report.
Is red.infd.edu.ar a scam or a legit site?
Is red.infd.edu.ar safe to use?
What is the risk from the ads and redirects on red.infd.edu.ar?
Why does red.infd.edu.ar open unrelated pages or pop-ups?
How do I stop the pop-ups or notifications from red.infd.edu.ar?
Has red.infd.edu.ar been flagged by antivirus engines?
Is red.infd.edu.ar on any phishing or malware blacklists?
Does red.infd.edu.ar have a valid SSL certificate?
Where is red.infd.edu.ar hosted?
How often is the red.infd.edu.ar report updated?
08 · Final Verdict
Final verdict
Official Argentine teacher-training portal red.infd.edu.ar is serving injected gambling spam and carries adverse antivirus detections
red.infd.edu.ar presents itself as the official network of nodes for Argentina's National Institute of Teacher Training, with a contact email on its own domain and a listed phone number. However, the page also contains a block of links to unrelated international gambling and betting domains, and a saved antivirus observation records adverse results from two independent engine families. The combination of a legitimate-looking government education portal with injected gambling links and adverse security detections is the signature of a compromised site, not a normal educational resource. Visitors should treat the domain as untrustworthy until the operator confirms cleanup.
09 · Community
Community
Are you the owner of red.infd.edu.ar?Verify and reply