The scan of maconlux.lu on 21 Aug 2026 reached no verdict either way (score 8). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with maconlux.lu?

2 analysed samples communicate with this URL, including Phishing.

How was maconlux.lu checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

maconlux.lu - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned maconlux.lu and returned a unknown verdict (score 8). The page resolved to 92.222.139.190 on OVH Hosting Limited in FR. 7 domains and 1 IP were contacted. 2 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 8) · Confidence 11%
Scanned URL: https://maconlux.lu/userfiles/files/ripesaporelegup.pdf
Domain: maconlux.lu · IP: 92.222.139.190 · AS16276 · FR
Server: openresty
Page title: Site not installed - OVHcloud
HTTP status: 404 · text/html; charset=utf8
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Oct 4 09: · subject CN=cluster128.hosting.ovh.net
Scan tier: fast · observed 2026-08-21 12:01:31 UTC

Malware communicating with this URL (2)

These samples were observed contacting or being served from maconlux.lu. Each links to its full analysis.

Phishing - referenced · fcaeb8171258829ca48c9c213cb3495a · first seen 2026-08-21
Phishing - referenced · 05ba3da4f3c91c7336d5cb7801b20bf3 · first seen 2026-08-21

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Untrusted certificate (ERR_TLS_CERT_ALTNAME_INVALID)

Contacted infrastructure

92.222.139.190 - AS16276 OVH Hosting Limited (France)

Observed indicators

maconlux.lu
www.ovhcloud.com
www.ovh.co.uk
docs.ovh.com
community.ovh.com
help.ovhcloud.com
www.ovh.com
92.222.139.190
https://maconlux.lu/userfiles/files/ripesaporelegup.pdf
https://maconlux.lu/__ovhp/common/img/favicon.ico
https://maconlux.lu/__ovhp/common/css/style.css
https://www.ovhcloud.com/
https://maconlux.lu/__ovhp/common/img/logo-white.png
https://maconlux.lu/userfiles/files/283723
https://www.ovh.co.uk/g1585.configuration
https://maconlux.lu/__ovhp/common/img/schema-misconfig.png
https://maconlux.lu/__ovhp/common/img/shadow.png
https://docs.ovh.com/gb/en
https://maconlux.lu/__ovhp/common/img/icon-book.png
https://community.ovh.com/en/c/web-hosting/web-hosting

Other scans of maconlux.lu (1)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

21 Aug 2026 - unknown

Questions about maconlux.lu

Is maconlux.lu safe?: The scan of maconlux.lu on 21 Aug 2026 reached no verdict either way (score 8). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with maconlux.lu?: 2 analysed samples communicate with this URL, including Phishing.
How was maconlux.lu checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of maconlux.lu

Scanned on MalwareAnalyzer by Cyble · Open interactive scan