The scan of dom4m.de on 22 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with dom4m.de?

6 analysed samples communicate with this URL, including Phishing.

How was dom4m.de checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

dom4m.de - URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned dom4m.de and returned a unknown verdict (score -12). The page resolved to 185.67.0.132 on Hostpro Ltd. in NL. 1 domain and 1 IP were contacted. 6 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -12) · Confidence 15%
Scanned URL: https://dom4m.de/userfiles/files/wowaronama.pdf
Domain: dom4m.de · IP: 185.67.0.132 · AS50673 · NL
Server: nginx
Page title: 404 Not Found
HTTP status: 404 · text/html; charset=iso-8859-1
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 17 22: · subject CN=dom4m.de
Scan tier: standard · observed 2026-08-22 12:20:32 UTC

Malware communicating with this URL (6)

These samples were observed contacting or being served from dom4m.de. Each links to its full analysis.

Phishing - referenced · fd459b583cdf9ef5409355da52006a0a · first seen 2026-08-21
Phishing - referenced · b80965bca848388eb0a25465795790d1 · first seen 2026-08-21
Phishing - referenced · 3968620d21cc0e6c3c3ede3c9d75aef2 · first seen 2026-08-20
Phishing - referenced · f769715e2e33c9dce8286ac1dda08828 · first seen 2026-08-14
Phishing - referenced · fc4bf20ca838e0ceb844e9989ff3152b · first seen 2026-08-12
Phishing - referenced · 9e86ff0c37c175456e269115718df57f · first seen 2026-08-11

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Detected technologies

Nginx

Contacted infrastructure

185.67.0.132 - AS50673 Hostpro Ltd. (Netherlands)

Observed indicators

dom4m.de
185.67.0.132
https://dom4m.de/userfiles/files/wowaronama.pdf

Other scans of dom4m.de (2)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

12 Aug 2026 - unknown · https://dom4m.de/userfiles/files/75393240979.pdf
11 Aug 2026 - unknown · https://dom4m.de/userfiles/files/25742653825.pdf

Questions about dom4m.de

Is dom4m.de safe?: The scan of dom4m.de on 22 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with dom4m.de?: 6 analysed samples communicate with this URL, including Phishing.
How was dom4m.de checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of dom4m.de

Scanned on MalwareAnalyzer by Cyble · Open interactive scan