mananthavadynorbertines.org - URL scan, 14 Aug 2026
MalwareAnalyzer by Cyble scanned mananthavadynorbertines.org and returned a unknown verdict (score 6). The page resolved to 37.98.151.122 on GCI Network Solutions Limited in AU. The domain was registered 5764 days ago through HOSTINGER operations, UAB. 4 domains and 3 IPs were contacted, over 14 HTTP requests. 1 malware sample communicates with this URL (Phishing). The request followed 2 redirects before landing. This is a point-in-time observation from 14 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 9%
- Scanned URL:
http://www.mananthavadynorbertines.org/www/js/ckfinder/userfiles/files/61844369132.pdf - Domain: mananthavadynorbertines.org · IP: 37.98.151.122 · AS47583 · AU
- Server: hcdn
- Page title: Page not found – Mananthavady Norbertines
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: HOSTINGER operations, UAB · domain age 5764 days · created 2010-11-01
- HTTP requests captured: 14
- Scan tier: fast · observed 2026-08-14 14:37:10 UTC
Redirect chain
http://www.mananthavadynorbertines.org/www/js/ckfinder/userfiles/files/61844369132.pdfhttps://www.mananthavadynorbertines.org/www/js/ckfinder/userfiles/files/61844369132.pdfhttps://mananthavadynorbertines.org/www/js/ckfinder/userfiles/files/61844369132.pdf
Malware communicating with this URL (1)
These samples were observed contacting or being served from mananthavadynorbertines.org. Each links to its full analysis.
- Phishing - referenced ·
f7b97357fde84f7443cd24630030bd7f· first seen 2026-08-14
Antivirus & YARA (0 of 44 engines)
No engine flagged this page's content.
Why this verdict
- Cross-host redirect chain
Detected technologies
- PHP
- WordPress
- Google Analytics
- jQuery
Contacted infrastructure
- 37.98.151.122 - AS47583 GCI Network Solutions Limited (Australia)
- 91.108.99.250 - AS47583 IPFFM Internet Provider Frankfurt GmbH (Australia)
- 37.98.151.22 - AS47583 GCI Network Solutions Limited (Australia)
Observed indicators
- mananthavadynorbertines.org
- gmpg.org
- www.googletagmanager.com
- www.brandfx.net
- 37.98.151.122
- 91.108.99.250
- 37.98.151.22
- https://mananthavadynorbertines.org/www/js/ckfinder/userfiles/files/61844369132.pdf
- https://gmpg.org/xfn/11
- https://www.googletagmanager.com/
- https://mananthavadynorbertines.org/feed/
- https://mananthavadynorbertines.org/comments/feed/
- https://mananthavadynorbertines.org/wp-content/plugins/all-in-one-seo-pack/dist/Lite/assets/css/table-of-contents/global.e90f6d47.css?ver=4.9.7.2
- https://mananthavadynorbertines.org/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.4
- https://mananthavadynorbertines.org/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.4
- https://mananthavadynorbertines.org/wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.4
- https://mananthavadynorbertines.org/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.1.4
- https://mananthavadynorbertines.org/wp-content/uploads/elementor/css/post-12.css?ver=1786709284
- https://mananthavadynorbertines.org/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.1.4
- https://mananthavadynorbertines.org/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu.min.css?ver=3.25.2
Other scans of mananthavadynorbertines.org (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 20 Aug 2026 - unknown ·
https://mananthavadynorbertines.org/www/js/ckfinder/userfiles/files/15848979914.pdf - 14 Aug 2026 - unknown
Questions about mananthavadynorbertines.org
- Is mananthavadynorbertines.org safe?
- The scan of mananthavadynorbertines.org on 14 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with mananthavadynorbertines.org?
- 1 analysed samples communicate with this URL, including Phishing.
- How was mananthavadynorbertines.org checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of mananthavadynorbertines.org
Scanned on MalwareAnalyzer by Cyble · Open interactive scan