Is stephan-kratt.de safe?

The scan of stephan-kratt.de on 22 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with stephan-kratt.de?

4 analysed samples communicate with this URL, including Phishing.

How was stephan-kratt.de checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

stephan-kratt.de - URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned stephan-kratt.de and returned a unknown verdict (score -12). The page resolved to 103.224.182.246 on Trellian Pty. Limited in US. 1 domain and 1 IP were contacted, over 1 HTTP request. 4 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score -12) · Confidence 15%
Scanned URL: https://stephan-kratt.de/data/reiterhof/userfiles/file/55609770585.pdf
Domain: stephan-kratt.de · IP: 103.224.182.246 · AS133618 · US
Server: Apache
Page title: stephan-kratt.de
HTTP status: 200 · text/html; charset=UTF-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Nov 16 06: · subject CN=siegtal-festival.de
HTTP requests captured: 1
Scan tier: standard · observed 2026-08-22 09:04:37 UTC

Malware communicating with this URL (4)

These samples were observed contacting or being served from stephan-kratt.de. Each links to its full analysis.

Phishing - referenced · e4613f022c02ab69f3dcb502e0539e06 · first seen 2026-08-20
Phishing - referenced · 8c8486332341906411dd989f758b637d · first seen 2026-08-16
Phishing - referenced · bfe323e70557c15b2c87e97cf53a8aa9 · first seen 2026-08-15
Phishing - referenced · df8a1ef304e0856821032638fb8931de · first seen 2026-08-14

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Valid TLS, no impersonation or off-origin credential post

Detected technologies

Apache

Contacted infrastructure

103.224.182.246 - AS133618 Trellian Pty. Limited (United States)

Observed indicators

stephan-kratt.de
103.224.182.246
https://stephan-kratt.de/data/reiterhof/userfiles/file/55609770585.pdf
https://stephan-kratt.de/js/fingerprint/iife.min.js
http://stephan-kratt.de/data/reiterhof/userfiles/file/55609770585.pdf?tr_uuid=20260822-1904-3871-93e0-bdc198c7e8f3&fp=-3

Other scans of stephan-kratt.de (3)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

22 Aug 2026 - unknown
16 Aug 2026 - unknown · https://stephan-kratt.de/en
15 Aug 2026 - unknown · https://stephan-kratt.de/en

Questions about stephan-kratt.de

Is stephan-kratt.de safe?: The scan of stephan-kratt.de on 22 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with stephan-kratt.de?: 4 analysed samples communicate with this URL, including Phishing.
How was stephan-kratt.de checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of stephan-kratt.de

Scanned on MalwareAnalyzer by Cyble · Open interactive scan