savytrading.com - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned savytrading.com and returned a unknown verdict (score -12). The page resolved to 13.248.243.5 on Amazon Technologies Inc. in US. The domain was registered 3766 days ago through GoDaddy.com, LLC. 3 domains and 2 IPs were contacted, over 4 HTTP requests. 1 malware sample communicates with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
http://savytrading.com/userfiles/file/ruvezele.pdf - Domain: savytrading.com · IP: 13.248.243.5 · AS16509 · US
- Server: DPS/2.0.0-beta+sha-46c8a14
- Page title: savytrading.com
- HTTP status: 404 · text/html;charset=utf-8
- Registrar: GoDaddy.com, LLC · domain age 3766 days · created 2016-04-30
- TLS issuer: C=US, O=GoDaddy.com, CN=GoDaddy TLS Intermediate CA DV - R1v1 · valid to Feb 28 09: · subject CN=savytrading.com
- HTTP requests captured: 4
- Scan tier: standard · observed 2026-08-23 02:50:53 UTC
Redirect chain
http://savytrading.com/userfiles/file/ruvezele.pdfhttps://savytrading.com/userfiles/file/ruvezele.pdf
Malware communicating with this URL (1)
These samples were observed contacting or being served from savytrading.com. Each links to its full analysis.
- Phishing - referenced ·
9bdc0cdd3134aa699afa0071ec5e1578· first seen 2026-08-20
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Contacted infrastructure
- 13.248.243.5 - AS16509 Amazon Technologies Inc. (United States)
- 76.223.105.230 - AS16509 Amazon.com, Inc. (United States)
Observed indicators
- savytrading.com
- img1.wsimg.com
- www.godaddy.com
- 13.248.243.5
- 76.223.105.230
- https://savytrading.com/userfiles/file/ruvezele.pdf
- https://savytrading.com/manifest.webmanifest
- https://img1.wsimg.com/isteam/ip/static/pwa-app/logo-default.png/:/rs=w:57,h:57,m
- https://img1.wsimg.com/isteam/ip/static/pwa-app/logo-default.png/:/rs=w:60,h:60,m
- https://img1.wsimg.com/isteam/ip/static/pwa-app/logo-default.png/:/rs=w:72,h:72,m
- https://img1.wsimg.com/isteam/ip/static/pwa-app/logo-default.png/:/rs=w:114,h:114,m
- https://img1.wsimg.com/isteam/ip/static/pwa-app/logo-default.png/:/rs=w:120,h:120,m
- https://img1.wsimg.com/isteam/ip/static/pwa-app/logo-default.png/:/rs=w:144,h:144,m
- https://img1.wsimg.com/isteam/ip/static/pwa-app/logo-default.png/:/rs=w:152,h:152,m
- https://img1.wsimg.com/isteam/ip/static/pwa-app/logo-default.png/:/rs=w:180,h:180,m
- https://savytrading.com/
- https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=en-in_corp_applications_base
- https://img1.wsimg.com/blobby/go/b63dc51a-13f0-44b5-9d03-74fe7e15601e/gpub/5671797155b0315c/script.js
- https://img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.51.17.js
- https://img1.wsimg.com/blobby/go/b63dc51a-13f0-44b5-9d03-74fe7e15601e/gpub/ce77a857186b097/script.js
Questions about savytrading.com
- Is savytrading.com safe?
- The scan of savytrading.com on 23 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with savytrading.com?
- 1 analysed samples communicate with this URL, including Phishing.
- How was savytrading.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of savytrading.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan