Is booking.abracadaroom.com safe?

No. MalwareAnalyzer scanned booking.abracadaroom.com on 22 Aug 2026 and returned a malicious verdict with a score of 88 out of 100. Treat it as hostile until it is re-checked.

How was booking.abracadaroom.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

booking.abracadaroom.com - malicious URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned booking.abracadaroom.com and returned a malicious verdict (score 88). The page resolved to 51.159.112.182 on Scaleway in FR. The domain was registered 3580 days ago through OVH sas. 11 domains and 5 IPs were contacted, over 27 HTTP requests. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 88) · Confidence 97%
Scanned URL: https://booking.abracadaroom.com/fr/no-cart
Domain: booking.abracadaroom.com · IP: 51.159.112.182 · AS12876 · FR
Page title: Panier vide
HTTP status: 200 · text/html; charset=utf-8
Registrar: OVH sas · domain age 3580 days · created 2016-11-02
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Nov 19 12: · subject CN=booking.abracadaroom.com
HTTP requests captured: 27 · cookies set: 3 · outgoing links: 10
Scan tier: standard · observed 2026-08-22 23:07:14 UTC

Antivirus & YARA (2 of 48 engines)

YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)
YARA: ESET research [yara]: IIS_Group10 (page content)

Why this verdict

2 antivirus/YARA engines flagged the page content: DLV_HTML_Smuggling, IIS_Group10
Runtime data beacon to glitchtip.apps.sombrero.k8s.unicstay.com
Certificate issued < 48h ago

Detected technologies

Nuxt.js
Google Analytics

Contacted infrastructure

51.159.112.182 - AS12876 Scaleway (France)
142.250.207.3 - AS15169 Google LLC (Japan)

Observed indicators

booking.abracadaroom.com
www.google-analytics.com
www.googletagmanager.com
faq.abracadaroom.com
www.abracadaroom.com
vacation-files-production.s3.fr-par.scw.cloud
fonts.googleapis.com
glitchtip.apps.sombrero.k8s.unicstay.com
widgets.rr.skeepers.io
fonts.gstatic.com
cl-pbr.cxr.skeepers.io
51.159.112.182
142.251.42.106
142.250.207.3
51.159.86.188
152.228.221.18
https://booking.abracadaroom.com/fr/no-cart
https://www.google-analytics.com/
https://booking.abracadaroom.com/favicon.ico
https://www.googletagmanager.com/gtm.js?id=

Questions about booking.abracadaroom.com

Is booking.abracadaroom.com safe?: No. MalwareAnalyzer scanned booking.abracadaroom.com on 22 Aug 2026 and returned a malicious verdict with a score of 88 out of 100. Treat it as hostile until it is re-checked.
How was booking.abracadaroom.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of booking.abracadaroom.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan