fourseasons.events - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned fourseasons.events and returned a unknown verdict (score 12). The page resolved to 35.214.24.7 on Google LLC in GB. The domain was registered 2239 days ago through IONOS SE. 12 domains and 1 IP were contacted, over 4 HTTP requests. 3 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 12) · Confidence 15%
- Scanned URL:
https://fourseasons.events/wp-content/plugins/super-forms/uploads/php/files/7bd4ea576e53a9142de7cfd572634443/43789203890.pdf - Domain: fourseasons.events · IP: 35.214.24.7 · AS15169 · GB
- Server: nginx
- Page title: Page not found - Four Seasons Events
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: IONOS SE · domain age 2239 days · created 2020-07-04
- HTTP requests captured: 4
- Scan tier: fast · observed 2026-08-22 02:13:10 UTC
Malware communicating with this URL (3)
These samples were observed contacting or being served from fourseasons.events. Each links to its full analysis.
- Phishing - referenced ·
71a7c6e837dc3bbcb8ba813a32da7c63· first seen 2026-08-22 - Phishing - referenced ·
e259c41e216854d8def91e4fd3d31d2d· first seen 2026-08-19 - Phishing - referenced ·
20cf1b9f71346eeb2bc6984a247d2861· first seen 2026-08-13
Antivirus & YARA (1 of 48 engines)
- YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)
These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.
Why this verdict
- A signature matched text in the page (DLV_HTML_Smuggling) — pages that discuss malware can match, so this alone is not a malicious verdict
Detected technologies
- Nginx
- WordPress
- Google Analytics
- jQuery
Contacted infrastructure
- 35.214.24.7 - AS15169 Google LLC (United Kingdom)
Observed indicators
- fourseasons.events
- fonts.gstatic.com
- fonts.googleapis.com
- use.typekit.net
- www.googletagmanager.com
- www.facebook.com
- www.linkedin.com
- www.instagram.com
- www.pinterest.com
- fourseasonsevents.co.uk
- demo.studiopress.com
- www.seemoregraphics.co.uk
- 35.214.24.7
- https://fourseasons.events/wp-content/plugins/super-forms/uploads/php/files/7bd4ea576e53a9142de7cfd572634443/43789203890.pdf
- https://fonts.gstatic.com/
- https://fonts.googleapis.com/
- https://use.typekit.net/af/d2a828/00000000000000003b9b1ebb/27/l?primer=7cdcb44be4a7db8877ffa5c0007b8dd865b3bbc383831fe2ea177f62257a9191&fvd=n2&v=3
- https://use.typekit.net/af/3d430f/00000000000000003b9b1eb7/27/l?subset_id=2&fvd=n7&v=3
- https://use.typekit.net/af/ec8ec8/00000000000000003b9b1ebe/27/l?subset_id=2&fvd=n3&v=3
- https://fourseasons.events/wp-content/uploads/siteground-optimizer-assets/siteground-optimizer-combined-css-2fcbd2c8ec50ed06f431ab414fa48c5a.css
Other scans of fourseasons.events (1)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 19 Aug 2026 - unknown ·
https://fourseasons.events/wp-content/plugins/super-forms/uploads/php/files/1990ebe4c7092902d6f5837b
Questions about fourseasons.events
- Is fourseasons.events safe?
- The scan of fourseasons.events on 22 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with fourseasons.events?
- 3 analysed samples communicate with this URL, including Phishing.
- How was fourseasons.events checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of fourseasons.events
Scanned on MalwareAnalyzer by Cyble · Open interactive scan