Is www.donauwell.at safe?

The scan of www.donauwell.at on 19 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

How was www.donauwell.at checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.donauwell.at - URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned www.donauwell.at and returned a unknown verdict (score 6). The page resolved to 168.119.101.126 on Hetzner Online GmbH in DE. 3 domains and 1 IP were contacted, over 9 HTTP requests. The request followed 2 redirects before landing. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: http://donauwell.at/userfiles/file/wewakokuxuxe.pdf
Domain: www.donauwell.at · IP: 168.119.101.126 · AS24940 · DE
Server: Apache
Page title: Home - Donauwell
HTTP status: 200 · text/html; charset=UTF-8
HTTP requests captured: 9
Scan tier: standard · observed 2026-08-19 18:05:34 UTC

Redirect chain

http://donauwell.at/userfiles/file/wewakokuxuxe.pdf
https://www.donauwell.at/userfiles/file/wewakokuxuxe.pdf
https://www.donauwell.at/

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Cross-host redirect chain

Detected technologies

Apache
Joomla
jQuery

Contacted infrastructure

168.119.101.126 - AS24940 Hetzner Online GmbH (Germany)

Observed indicators

www.donauwell.at
www.instagram.com
www.facebook.com
168.119.101.126
https://www.donauwell.at/
https://www.donauwell.at/gfonts/gfonts.css
https://www.donauwell.at/assets/colorbox/css/colorbox.min.css?v=ca73663d
https://www.donauwell.at/assets/swipe/css/swipe.min.css?v=0c78b347
https://www.donauwell.at/system/modules/pct_privacy_manager/assets/css/styles.min.css?v=17a367c5
https://www.donauwell.at/files/cto_layout/scripts/revolution/css/settings.css?v=89f45414
https://www.donauwell.at/files/cto_layout/scripts/revolution/css/layers.css?v=89f45414
https://www.donauwell.at/files/cto_layout/scripts/revolution/css/navigation.css?v=89f45414
https://www.donauwell.at/system/modules/pct_revolutionslider/assets/css/styles.css?v=93256411
https://www.donauwell.at/system/modules/pct_autogrid/assets/css/grid.min.css?v=5a11ba27
https://www.donauwell.at/files/cto_layout/fonts/fontawesome-webfont.woff2
https://www.donauwell.at/files/cto_layout/css/animate.css
https://www.donauwell.at/files/cto_layout/scripts/isotope/isotope_styles.css
https://www.donauwell.at/files/cto_layout/css/font-awesome.min.css
https://www.donauwell.at/files/cto_layout/css/themify-icons.css
https://www.donauwell.at/files/cto_layout/css/tinymce.css

Questions about www.donauwell.at

Is www.donauwell.at safe?: The scan of www.donauwell.at on 19 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
How was www.donauwell.at checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.donauwell.at

Scanned on MalwareAnalyzer by Cyble · Open interactive scan