www.gs-gleichmann.de - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned www.gs-gleichmann.de and returned a unknown verdict (score 0). The page resolved to 81.169.145.160 on STRATO AG in DE. 3 domains and 1 IP were contacted, over 10 HTTP requests. 13 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 0%
- Scanned URL:
https://www.gs-gleichmann.de/wp-content/plugins/formcraft/file-upload/server/content/files/160739740c438f---40985428011.pdf - Domain: www.gs-gleichmann.de · IP: 81.169.145.160 · AS6724 · DE
- Server: Apache/2.4.68 (Unix)
- Page title: Seite nicht gefunden – GS Geländer- und Stahlbau Karl-Heinz Gleichmann, Burladingen
- HTTP status: 404 · text/html; charset=UTF-8
- HTTP requests captured: 10
- Scan tier: fast · observed 2026-08-21 22:01:49 UTC
Malware communicating with this URL (13)
These samples were observed contacting or being served from www.gs-gleichmann.de. Each links to its full analysis.
- Phishing - referenced ·
2db6843d82a43ce1de5237083412aaeb· first seen 2026-08-21 - Phishing - referenced ·
96d25d74f300727b1aa5c2d01139ccf2· first seen 2026-08-21 - Phishing - referenced ·
ebec2f0bb58e95031104fe04a6121b10· first seen 2026-08-21 - Phishing - referenced ·
83eef3435a62f70e1c6dae772c54710c· first seen 2026-08-20 - Phishing - referenced ·
2f638574c3fc46c5c91c29cc5cc0b938· first seen 2026-08-20 - Phishing - referenced ·
f67e8e97119907ff8ddb31ff428a5e1a· first seen 2026-08-19 - Phishing - referenced ·
09c2bb0fd97c50e21b817c91b5dab281· first seen 2026-08-19 - Phishing - referenced ·
ec2f7eb142c2e6104754193792930ee9· first seen 2026-08-17 - Phishing - referenced ·
18f50b57f6b11401cc02f8e300813323· first seen 2026-08-17 - Phishing - referenced ·
31554ad4369cd382b497770a740c81c8· first seen 2026-08-16 - Phishing - referenced ·
8349656ea7f8168cad3d3bf612469ca4· first seen 2026-08-16 - Phishing - referenced ·
f2b3d5a25184e53151c1682c305d11ea· first seen 2026-08-14 - Phishing - referenced ·
faf3762d9e78a3612dc41589b9ef593d· first seen 2026-08-14
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Detected technologies
- Apache
- PHP
- WordPress
- jQuery
Contacted infrastructure
- 81.169.145.160 - AS6724 STRATO AG (Germany)
Observed indicators
- www.gs-gleichmann.de
- gs-gleichmann.de
- cookiedatabase.org
- 81.169.145.160
- https://www.gs-gleichmann.de/wp-content/plugins/formcraft/file-upload/server/content/files/160739740c438f---40985428011.pdf
- https://www.gs-gleichmann.de/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.4
- https://www.gs-gleichmann.de/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1766071243
- https://www.gs-gleichmann.de/wp-content/themes/twentytwentythree/style.css?ver=4b81c635e3d684edb53c230c587b770d
- https://www.gs-gleichmann.de/wp-content/themes/twentytwentythree-child/style.css?ver=4b81c635e3d684edb53c230c587b770d
- https://www.gs-gleichmann.de/wp-content/themes/twentytwentythree-child/custom/css/style.css
- https://www.gs-gleichmann.de/wp-content/plugins/master-slider/public/assets/css/masterslider.main.css?ver=3.11.0
- https://www.gs-gleichmann.de/wp-content/uploads/master-slider/custom.css?ver=5.1
- https://www.gs-gleichmann.de/wp-content/themes/twentytwentythree-child/custom/js/jquery-3.6.3.min.js?ver=4b81c635e3d684edb53c230c587b770d
- https://www.gs-gleichmann.de/wp-content/themes/twentytwentythree-child/custom/js/in-view.min.js?ver=4b81c635e3d684edb53c230c587b770d
- https://www.gs-gleichmann.de/wp-content/themes/twentytwentythree-child/custom/js/in-view-trigger.js?ver=4b81c635e3d684edb53c230c587b770d
- https://www.gs-gleichmann.de/wp-content/themes/twentytwentythree-child/custom/js/scripts.js?ver=4b81c635e3d684edb53c230c587b770d
- https://www.gs-gleichmann.de/wp-json/
- https://www.gs-gleichmann.de/xmlrpc.php?rsd
- https://www.gs-gleichmann.de/apple-touch-icon.png
- https://www.gs-gleichmann.de/favicon-32x32.png
Other scans of www.gs-gleichmann.de (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 22 Aug 2026 - unknown ·
https://www.gs-gleichmann.de/wp-content/plugins/formcraft/file-upload/server/content/files/1609afa28 - 16 Aug 2026 - unknown ·
https://www.gs-gleichmann.de/wp-content/plugins/formcraft/file-upload/server/content/files/160c320db
Questions about www.gs-gleichmann.de
- Is www.gs-gleichmann.de safe?
- The scan of www.gs-gleichmann.de on 21 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.gs-gleichmann.de?
- 13 analysed samples communicate with this URL, including Phishing.
- How was www.gs-gleichmann.de checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.gs-gleichmann.de
Scanned on MalwareAnalyzer by Cyble · Open interactive scan