nappsa.org - URL scan, 16 Aug 2026
MalwareAnalyzer by Cyble scanned nappsa.org and returned a unknown verdict (score 12). The page resolved to 160.153.49.161 on GoDaddy.com, LLC in US. The domain was registered 7139 days ago through Tucows Domains Inc.. 16 domains and 1 IP were contacted, over 39 HTTP requests. 2 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 16 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 12) · Confidence 15%
- Scanned URL:
http://nappsa.org/userfiles/file/napidupizeb.pdf - Domain: nappsa.org · IP: 160.153.49.161 · AS26496 · US
- Server: Apache
- Page title: Page not found – NAPPSA
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: Tucows Domains Inc. · domain age 7139 days · created 2007-01-28
- HTTP requests captured: 39
- Scan tier: fast · observed 2026-08-16 02:08:32 UTC
Redirect chain
http://nappsa.org/userfiles/file/napidupizeb.pdfhttps://nappsa.org/userfiles/file/napidupizeb.pdf
Malware communicating with this URL (2)
These samples were observed contacting or being served from nappsa.org. Each links to its full analysis.
- Phishing - referenced ·
6a3b21ea729966a52fb4cc16a408d8a3· first seen 2026-08-16 - Phishing - referenced ·
5b3bbd27e26bc40da7d953b87e09be75· first seen 2026-08-14
Antivirus & YARA (1 of 47 engines)
- YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)
These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.
Why this verdict
- A signature matched text in the page (DLV_HTML_Smuggling) — pages that discuss malware can match, so this alone is not a malicious verdict
Detected technologies
- Apache
- PHP
- WordPress
- Google Analytics
- jQuery
- Bootstrap
Contacted infrastructure
- 160.153.49.161 - AS26496 GoDaddy.com, LLC (United States)
Observed indicators
- nappsa.org
- gmpg.org
- www.googletagmanager.com
- fonts.googleapis.com
- fonts.gstatic.com
- 1ea20f0a-c1e0-466a-8206-91e943994195.growthzoneapp.com
- members.nappsa.org
- www.facebook.com
- www.linkedin.com
- www.instagram.com
- www.nigerianpharmacist.org
- www.npamichigan.org
- www.npadfw.org
- www.cancer.gov
- tunjaksolutions.com
- secure.givelively.org
- 160.153.49.161
- https://nappsa.org/userfiles/file/napidupizeb.pdf
- http://gmpg.org/xfn/11
- https://www.googletagmanager.com/
Other scans of nappsa.org (3)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 16 Aug 2026 - unknown
- 14 Aug 2026 - unknown ·
https://nappsa.org/userfiles/file/gekenabunibus.pdf - 14 Aug 2026 - unknown ·
https://nappsa.org/userfiles/file/gekenabunibus.pdf
Questions about nappsa.org
- Is nappsa.org safe?
- The scan of nappsa.org on 16 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with nappsa.org?
- 2 analysed samples communicate with this URL, including Phishing.
- How was nappsa.org checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of nappsa.org
Scanned on MalwareAnalyzer by Cyble · Open interactive scan