massvt.webnode.sk - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned massvt.webnode.sk and returned a unknown verdict (score -12). The page resolved to 3.79.173.192 on A100 ROW GmbH in DE. 7 domains and 2 IPs were contacted, over 3 HTTP requests. 1 malware sample communicates with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

• Verdict: unknown (score -12) · Confidence 15%
• Scanned URL: http://massvt.sk/editor_uploads/system/files/keboridazileburorala.pdf
• Domain: massvt.webnode.sk · IP: 3.79.173.192 · AS16509 · DE
• Server: webnode
• Page title: MAS Slanské vrchy-Topľa
• HTTP status: 200 · text/html; charset=UTF-8
• TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 20 23: · subject CN=webnode.sk
• HTTP requests captured: 3
• Scan tier: fast · observed 2026-08-21 21:56:09 UTC

Redirect chain

1. http://massvt.sk/editor_uploads/system/files/keboridazileburorala.pdf
2. https://massvt.webnode.sk/

Malware communicating with this URL (1)

These samples were observed contacting or being served from massvt.webnode.sk. Each links to its full analysis.

• Phishing - referenced · 525558ca48816e7e4bcd1928408c528d · first seen 2026-08-21

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

• Valid TLS, no impersonation or off-origin credential post

Detected technologies

• Google Analytics

Contacted infrastructure

• 3.79.173.192 - AS16509 A100 ROW GmbH (Germany)
• 81.2.196.170 - AS24806 public services (Czechia)

Observed indicators

• massvt.webnode.sk
• duyn491kcolsw.cloudfront.net
• fonts.gstatic.com
• 500fa75846.clvaw-cdnwnd.com
• www.googletagmanager.com
• docs.google.com
• www.irkos.sk
• 3.79.173.192
• 81.2.196.170
• https://massvt.webnode.sk/
• https://duyn491kcolsw.cloudfront.net/
• https://fonts.gstatic.com/
• https://500fa75846.clvaw-cdnwnd.com/2608444adeb69c67da03eaeda5d6fb1e/200000521-a9812a9814/logo_web.png?ph=500fa75846
• https://duyn491kcolsw.cloudfront.net/files/0r/0rk/0rklmm.css?ph=500fa75846
• https://duyn491kcolsw.cloudfront.net/files/3n/3ny/3ny4od.css?ph=500fa75846
• https://duyn491kcolsw.cloudfront.net/files/1i/1ik/1ikvgu.css?ph=500fa75846
• https://duyn491kcolsw.cloudfront.net/files/0k/0k1/0k1ucs.css?ph=500fa75846
• https://duyn491kcolsw.cloudfront.net/files/0o/0on/0onzbj.css?ph=500fa75846
• https://duyn491kcolsw.cloudfront.net/files/34/34q/34qmjb.css?ph=500fa75846
• https://duyn491kcolsw.cloudfront.net/files/3v/3vu/3vu1rn.css?ph=500fa75846

Questions about massvt.webnode.sk

Is massvt.webnode.sk safe?

The scan of massvt.webnode.sk on 21 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with massvt.webnode.sk?

1 analysed samples communicate with this URL, including Phishing.

How was massvt.webnode.sk checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of massvt.webnode.sk

Scanned on MalwareAnalyzer by Cyble · Open interactive scan