art-wonders.com - URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned art-wonders.com and returned a unknown verdict (score 0). The page resolved to 216.194.165.98 on InMotion Hosting, Inc. in US. The domain was registered 3839 days ago through GoDaddy.com, LLC. 4 domains and 1 IP were contacted, over 22 HTTP requests. 6 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

• Verdict: unknown (score 0) · Confidence 6%
• Scanned URL: http://art-wonders.com/ckeditor/ckfinder/core/connector/php/uploads/files/40568383419.pdf
• Domain: art-wonders.com · IP: 216.194.165.98 · AS22611 · US
• Server: nginx
• Page title: Page not found – Art Wonders
• HTTP status: 404 · text/html; charset=UTF-8
• Registrar: GoDaddy.com, LLC · domain age 3839 days · created 2016-02-17
• TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 30 21: · subject CN=art-wonders.com
• HTTP requests captured: 22
• Scan tier: standard · observed 2026-08-23 00:44:48 UTC

Redirect chain

1. http://art-wonders.com/ckeditor/ckfinder/core/connector/php/uploads/files/40568383419.pdf
2. https://art-wonders.com/ckeditor/ckfinder/core/connector/php/uploads/files/40568383419.pdf

Malware communicating with this URL (6)

These samples were observed contacting or being served from art-wonders.com. Each links to its full analysis.

• Phishing - referenced · bc6d12e2e7cda8627c0ec81d81752f9a · first seen 2026-08-21
• Phishing - referenced · f55edf0df46e942984fe3576496f4209 · first seen 2026-08-21
• Phishing - referenced · 192479f035bf46db5b7774815987d87f · first seen 2026-08-20
• Phishing - referenced · 872faa9770647b6d5b86e8e3d2b1386c · first seen 2026-08-17
• Phishing - referenced · 29ff60c2be39364b2f396bbb34eb6db2 · first seen 2026-08-16
• Phishing - referenced · 22d70f59abc46d9a760e1e20810d19e7 · first seen 2026-08-15

Antivirus & YARA (1 of 48 engines)

• YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)

These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.

Why this verdict

• Valid TLS, no impersonation or off-origin credential post
• A signature matched text in the page (DLV_HTML_Smuggling) — pages that discuss malware can match, so this alone is not a malicious verdict

Detected technologies

• Nginx
• WordPress
• Google Analytics
• jQuery

Contacted infrastructure

• 216.194.165.98 - AS22611 InMotion Hosting, Inc. (United States)

Observed indicators

• art-wonders.com
• gmpg.org
• www.googletagmanager.com
• www.motherearthcc.com
• 216.194.165.98
• https://art-wonders.com/ckeditor/ckfinder/core/connector/php/uploads/files/40568383419.pdf
• https://gmpg.org/xfn/11
• https://www.googletagmanager.com/
• https://art-wonders.com/feed/
• https://art-wonders.com/comments/feed/
• https://art-wonders.com/wp-includes/css/dist/block-library/style.min.css?ver=7.1
• https://art-wonders.com/wp-content/plugins/stencil/public/css/stencil-public.css?ver=1.14.9
• https://art-wonders.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=11.0.1
• https://art-wonders.com/wp-content/plugins/woocommerce/assets/css/woocommerce-smallscreen.css?ver=11.0.1
• https://art-wonders.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=11.0.1
• https://art-wonders.com/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.9
• https://art-wonders.com/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.9
• https://art-wonders.com/wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.9
• https://art-wonders.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.2.3
• https://art-wonders.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.2.3

Other scans of art-wonders.com (3)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

• 23 Aug 2026 - unknown
• 21 Aug 2026 - unknown · https://art-wonders.com/ckeditor/ckfinder/core/connector/php/uploads/files/zodoxugikukenabojalinaku.
• 20 Aug 2026 - unknown · https://art-wonders.com/ckeditor/ckfinder/core/connector/php/uploads/files/54404478169.pdf

Questions about art-wonders.com

Is art-wonders.com safe?

The scan of art-wonders.com on 23 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with art-wonders.com?

6 analysed samples communicate with this URL, including Phishing.

How was art-wonders.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of art-wonders.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan