Is grossbuch.com safe?

The scan of grossbuch.com on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with grossbuch.com?

1 analysed samples communicate with this URL, including Phishing.

How was grossbuch.com checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

grossbuch.com - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned grossbuch.com and returned a unknown verdict (score 6). The page resolved to 51.195.17.68 on OVH Hosting Limited in DE. The domain was registered 5776 days ago through Key-Systems GmbH. 3 domains and 1 IP were contacted, over 3 HTTP requests. 1 malware sample communicates with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: http://grossbuch.com/upload/file/lepezemufutepufoputise.pdf
Domain: grossbuch.com · IP: 51.195.17.68 · AS16276 · DE
Server: nginx/1.18.0 (Ubuntu)
Page title: ERRP | Expired Registration Recovery Policy
HTTP status: 200 · text/html; charset=UTF-8
Registrar: Key-Systems GmbH · domain age 5776 days · created 2010-10-27
HTTP requests captured: 3
Scan tier: fast · observed 2026-08-21 05:01:12 UTC

Redirect chain

http://grossbuch.com/upload/file/lepezemufutepufoputise.pdf
http://grossbuch.com/index.php

Malware communicating with this URL (1)

These samples were observed contacting or being served from grossbuch.com. Each links to its full analysis.

Phishing - referenced · 2e92db1e9be8db987238399b2185b551 · first seen 2026-08-21

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Served over plaintext HTTP

Detected technologies

Nginx
Google Analytics
jQuery

Contacted infrastructure

51.195.17.68 - AS16276 OVH Hosting Limited (Germany)

Observed indicators

grossbuch.com
ajax.googleapis.com
parkingcrew.net
51.195.17.68
http://grossbuch.com/index.php
http://grossbuch.com/assets/img/favicon.png
http://grossbuch.com/assets/css/screen.css
http://grossbuch.com/style_eRRP.css
http://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
http://grossbuch.com/assets/js/fade-plugin.js
http://parkingcrew.net/jsparkcaf.php?regcn=582646&_v=2&_h=
http://grossbuch.com/v3/
http://grossbuch.com/assets/img/errp_logo.png
http://grossbuch.com/assets/img/flag_us.png
http://grossbuch.com/assets/img/flag_de.png
http://grossbuch.com/assets/img/flag_es.png
http://grossbuch.com/legalnotice.php
http://grossbuch.com/privacypolicy.html

Questions about grossbuch.com

Is grossbuch.com safe?: The scan of grossbuch.com on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with grossbuch.com?: 1 analysed samples communicate with this URL, including Phishing.
How was grossbuch.com checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of grossbuch.com

Scanned on MalwareAnalyzer by Cyble · Open interactive scan