volkshilfe-ktn.at - URL scan, 14 Aug 2026
MalwareAnalyzer by Cyble scanned volkshilfe-ktn.at and returned a unknown verdict (score 2), categorised as suspicious-infrastructure. The page resolved to 144.76.54.80 on Oja.at GmbH in DE. 7 domains and 1 IP were contacted, over 30 HTTP requests. 2 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 14 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 2) · Confidence 8%
- Scanned URL:
http://volkshilfe-ktn.at/images/content/files/6934526729.pdf - Domain: volkshilfe-ktn.at · IP: 144.76.54.80 · AS24940 · DE
- Server: Apache
- Page title: Seite wurde nicht gefunden. - Volkshilfe Kärnten
- HTTP status: 404 · text/html; charset=UTF-8
- TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Nov 6 23: · subject CN=vhktn.at
- HTTP requests captured: 30
- Scan tier: standard · observed 2026-08-14 16:00:34 UTC
Redirect chain
http://volkshilfe-ktn.at/images/content/files/6934526729.pdfhttps://volkshilfe-ktn.at/images/content/files/6934526729.pdf
Malware communicating with this URL (2)
These samples were observed contacting or being served from volkshilfe-ktn.at. Each links to its full analysis.
- Phishing - referenced ·
6b1ccf1519f18ea8fe9d91bafa9d08e6· first seen 2026-08-13 - Phishing - referenced ·
6e377b26ff00224e05889c7dac18f48d· first seen 2026-08-13
Antivirus & YARA (0 of 44 engines)
No engine flagged this page's content.
Categories
- suspicious-infrastructure
Why this verdict
- Algorithmically-generated (DGA-like) hostname
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Apache
- WordPress
- jQuery
Contacted infrastructure
- 144.76.54.80 - AS24940 Oja.at GmbH (Germany)
Observed indicators
- volkshilfe-ktn.at
- gmpg.org
- www.vhktn.at
- www.breakfastclub-kaernten.at
- www.facebook.com
- www.instagram.com
- cookiedatabase.org
- 144.76.54.80
- https://volkshilfe-ktn.at/images/content/files/6934526729.pdf
- https://gmpg.org/xfn/11
- https://www.vhktn.at/
- https://www.vhktn.at/feed/
- https://www.vhktn.at/wp-content/plugins/events-manager/includes/css/events-manager.min.css?ver=7.4.2
- https://www.vhktn.at/wp-content/plugins/events-manager-pro/includes/css/events-manager-pro.css?ver=3.5
- https://www.vhktn.at/wp-content/plugins/complianz-gdpr-premium/assets/css/cookieblocker.min.css?ver=1717345827
- https://www.vhktn.at/wp-content/plugins/email-encoder-bundle/assets/css/style.css?ver=54d4eedc552c499c4a8d6b89c23d3df1
- https://www.vhktn.at/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.5
- https://www.vhktn.at/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.5
- https://www.vhktn.at/wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.5
- https://www.vhktn.at/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.33.0
Other scans of volkshilfe-ktn.at (3)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 21 Aug 2026 - suspicious ·
http://volkshilfe-ktn.at/images/content/files/povaderutonarojepanuxivir.pdf - 14 Aug 2026 - unknown
- 14 Aug 2026 - suspicious ·
http://volkshilfe-ktn.at/images/content/files/6934526729.pdf
Questions about volkshilfe-ktn.at
- Is volkshilfe-ktn.at safe?
- The scan of volkshilfe-ktn.at on 14 Aug 2026 reached no verdict either way (score 2). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with volkshilfe-ktn.at?
- 2 analysed samples communicate with this URL, including Phishing.
- How was volkshilfe-ktn.at checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of volkshilfe-ktn.at
Scanned on MalwareAnalyzer by Cyble · Open interactive scan