Is cluster006.ovh.net safe?

The scan of cluster006.ovh.net on 11 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with cluster006.ovh.net?

1 analysed samples communicate with this URL, including Phish.

How was cluster006.ovh.net checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

cluster006.ovh.net - URL scan, 11 Aug 2026

MalwareAnalyzer by Cyble scanned cluster006.ovh.net and returned a unknown verdict (score 6). The page resolved to 213.186.33.17 on OVH SAS in FR. The domain was registered 10291 days ago through OVH sas. 7 domains and 1 IP were contacted. 1 malware sample communicates with this URL (Phish). This is a point-in-time observation from 11 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: http://cluster006.ovh.net/~greeters/namur/ckfinder/userfiles/files/22372005324.pdf
Domain: cluster006.ovh.net · IP: 213.186.33.17 · AS16276 · FR
Server: openresty
Page title: Site not installed - OVHcloud
HTTP status: 404 · text/html; charset=utf8
Registrar: OVH sas · domain age 10291 days · created 1998-06-08
Scan tier: fast · observed 2026-08-11 15:49:00 UTC

Malware communicating with this URL (1)

These samples were observed contacting or being served from cluster006.ovh.net. Each links to its full analysis.

Phish - referenced · 1fb47a5442ab1d7e48af2d9ed32fc447 · first seen 2026-08-11

Why this verdict

Served over plaintext HTTP

Contacted infrastructure

213.186.33.17 - AS16276 OVH SAS (France)

Observed indicators

cluster006.ovh.net
www.ovhcloud.com
www.ovh.co.uk
docs.ovh.com
community.ovh.com
help.ovhcloud.com
www.ovh.com
213.186.33.17
http://cluster006.ovh.net/~greeters/namur/ckfinder/userfiles/files/22372005324.pdf
http://cluster006.ovh.net/__ovhp/common/img/favicon.ico
http://cluster006.ovh.net/__ovhp/common/css/style.css
https://www.ovhcloud.com/
http://cluster006.ovh.net/__ovhp/common/img/logo-white.png
http://cluster006.ovh.net/~greeters/namur/ckfinder/userfiles/files/283723
https://www.ovh.co.uk/g1585.configuration
http://cluster006.ovh.net/__ovhp/common/img/schema-misconfig.png
http://cluster006.ovh.net/__ovhp/common/img/shadow.png
https://docs.ovh.com/gb/en
http://cluster006.ovh.net/__ovhp/common/img/icon-book.png
https://community.ovh.com/en/c/web-hosting/web-hosting

Other scans of cluster006.ovh.net (3)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

20 Aug 2026 - unknown · http://cluster006.ovh.net/~greeters/namur/ckfinder/userfiles/files/22399075864.pdf
11 Aug 2026 - unknown
11 Aug 2026 - unknown

Questions about cluster006.ovh.net

Is cluster006.ovh.net safe?: The scan of cluster006.ovh.net on 11 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with cluster006.ovh.net?: 1 analysed samples communicate with this URL, including Phish.
How was cluster006.ovh.net checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of cluster006.ovh.net

Scanned on MalwareAnalyzer by Cyble · Open interactive scan