Is booking.somaplus.de safe?

No. MalwareAnalyzer scanned booking.somaplus.de on 22 Aug 2026 and returned a suspicious verdict with a score of 37 out of 100. Treat it as hostile until it is re-checked.

How was booking.somaplus.de checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

booking.somaplus.de - suspicious URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned booking.somaplus.de and returned a suspicious verdict (score 37). The page resolved to 172.66.47.7 on Cloudflare, Inc. in US. 11 domains and 7 IPs were contacted, over 48 HTTP requests. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 37) · Confidence 40%
Scanned URL: https://booking.somaplus.de/en
Domain: booking.somaplus.de · IP: 172.66.47.7 · AS13335 · US
Server: cloudflare
Page title: Book Blood Test Appointment at Soma Plus | Find Nearest Pharmacy & Schedule Now
HTTP status: 200 · text/html; charset=utf-8
TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 6 15: · subject CN=booking.somaplus.de
HTTP requests captured: 48 · cookies set: 5 · outgoing links: 18
Scan tier: standard · observed 2026-08-22 04:11:06 UTC

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Runtime data beacon to mpc2-prod-27-is5qnl632q-uk.a.run.app

Detected technologies

Cloudflare
Next.js
Google Analytics

Contacted infrastructure

172.66.47.7 - AS13335 Cloudflare, Inc. (United States)
142.250.183.40 - AS15169 Google LLC (US)
172.217.25.206 - AS15169 Google LLC (Malaysia)
157.240.13.19 - AS32934 Facebook, Inc. (Singapore)
157.240.8.35 - AS32934 Facebook, Inc. (Australia)

Observed indicators

booking.somaplus.de
www.googletagmanager.com
booking.g24.health
www.facebook.com
g24.health
www.easy-coding.io
connect.facebook.net
api.g24.health
www.google-analytics.com
mpc2-prod-27-is5qnl632q-uk.a.run.app
dbbfubm03el7e.cloudfront.net
172.66.47.7
142.250.183.40
172.217.25.206
157.240.13.19
157.240.8.35
63.177.168.96
34.143.73.2
https://booking.somaplus.de/en
https://booking.somaplus.de/_next/static/css/fa2e6799ea8e607d.css

Questions about booking.somaplus.de

Is booking.somaplus.de safe?: No. MalwareAnalyzer scanned booking.somaplus.de on 22 Aug 2026 and returned a suspicious verdict with a score of 37 out of 100. Treat it as hostile until it is re-checked.
How was booking.somaplus.de checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of booking.somaplus.de

Scanned on MalwareAnalyzer by Cyble · Open interactive scan