The scan of bnovum.hu on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with bnovum.hu?

2 analysed samples communicate with this URL, including Phishing.

How was bnovum.hu checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

bnovum.hu - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned bnovum.hu and returned a unknown verdict (score 6), categorised as credential-harvest. The page resolved to 185.51.191.47 on Tarhely.Eu Szolgaltato Kft. in HU. 6 domains and 1 IP were contacted, over 16 HTTP requests. 2 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 12%
Scanned URL: https://bnovum.hu/downloads/87562578917.pdf
Domain: bnovum.hu · IP: 185.51.191.47 · AS43359 · HU
Server: Apache
Page title: Bánszerva Novum
HTTP status: 404 · text/html; charset=UTF-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 5 12: · subject CN=bnovum.hu
HTTP requests captured: 16
Scan tier: standard · observed 2026-08-21 16:20:55 UTC

Malware communicating with this URL (2)

These samples were observed contacting or being served from bnovum.hu. Each links to its full analysis.

Phishing - referenced · 1f2f514bda4e8655b95d0b541ecc2ff6 · first seen 2026-08-19
Phishing - referenced · ec066f94088e41c770a6384f2bd5cfee · first seen 2026-08-13

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Valid TLS, no impersonation or off-origin credential post

Detected technologies

Apache
Google Analytics
jQuery

Contacted infrastructure

185.51.191.47 - AS43359 Tarhely.Eu Szolgaltato Kft. (Hungary)

Observed indicators

bnovum.hu
purl.org
maps.googleapis.com
css3-mediaqueries-js.googlecode.com
html5shim.googlecode.com
www.googletagmanager.com
185.51.191.47
https://bnovum.hu/downloads/87562578917.pdf
http://purl.org/dc/terms/
https://bnovum.hu/favicon.ico
https://bnovum.hu/images/apple-icon.png
https://bnovum.hu/images/apple-icon-76x760.png
https://bnovum.hu/images/apple-icon-120x120.png
https://bnovum.hu/images/apple-icon-152x152.png
https://bnovum.hu/css/layout.css
https://bnovum.hu/css/print.css
https://bnovum.hu/js/jquery-1.11.0.min.js
https://bnovum.hu/js/jquery-ui.js
https://bnovum.hu/js/jquery.purl.js
https://bnovum.hu/js/jquery.touchSwipe.min.js

Other scans of bnovum.hu (3)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

21 Aug 2026 - unknown
19 Aug 2026 - unknown · https://bnovum.hu/downloads/kefurivedusavobagesonu.pdf
19 Aug 2026 - unknown · https://bnovum.hu/downloads/kefurivedusavobagesonu.pdf

Questions about bnovum.hu

Is bnovum.hu safe?: The scan of bnovum.hu on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with bnovum.hu?: 2 analysed samples communicate with this URL, including Phishing.
How was bnovum.hu checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of bnovum.hu

Scanned on MalwareAnalyzer by Cyble · Open interactive scan