Is s110.goserver.host safe?

The scan of s110.goserver.host on 19 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with s110.goserver.host?

1 analysed samples communicate with this URL.

How was s110.goserver.host checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

s110.goserver.host - URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned s110.goserver.host and returned a unknown verdict (score 6). The page resolved to 185.30.32.110 on webgo GmbH in DE. The domain was registered 3996 days ago through InterNetX GmbH. 3 domains and 1 IP were contacted. 1 malware sample communicates with this URL. The request followed 2 redirects before landing. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: http://fidezuxa.taohandpan.com/uploads/1/3/2/8/132814930/waban.pdf
Domain: s110.goserver.host · IP: 185.30.32.110 · AS48324 · DE
Server: nginx
Page title: Das webgo Webspace Admin-Dashboard wird abgeschaltet, nutzen Sie das webgo Kundenportal. - webgo GmbH
HTTP status: 403 · text/html
Registrar: InterNetX GmbH · domain age 3996 days · created 2015-09-10
Scan tier: fast · observed 2026-08-19 16:44:58 UTC

Redirect chain

http://fidezuxa.taohandpan.com/uploads/1/3/2/8/132814930/waban.pdf
http://s110.goserver.host/
https://s110.goserver.host/

Malware communicating with this URL (1)

These samples were observed contacting or being served from s110.goserver.host. Each links to its full analysis.

15693511891.pdf - referenced · 6e20aba3571c92e5d822162b76d5a716 · first seen 2026-08-19

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Cross-host redirect chain

Detected technologies

Nginx

Contacted infrastructure

185.30.32.110 - AS48324 webgo GmbH (Germany)

Observed indicators

s110.goserver.host
login.webgo.de
webgo.de
185.30.32.110
https://s110.goserver.host/
https://login.webgo.de/
https://s110.goserver.host/errorpages/images/external-link.svg
https://webgo.de/faq
https://webgo.de/
https://webgo.de/impressum
https://webgo.de/agb
https://webgo.de/datenschutz

Other scans of s110.goserver.host (1)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

19 Aug 2026 - unknown

Questions about s110.goserver.host

Is s110.goserver.host safe?: The scan of s110.goserver.host on 19 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with s110.goserver.host?: 1 analysed samples communicate with this URL.
How was s110.goserver.host checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of s110.goserver.host

Scanned on MalwareAnalyzer by Cyble · Open interactive scan