www.hypnotiseur.com - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned www.hypnotiseur.com and returned a unknown verdict (score 8). The page resolved to 51.15.191.158 on Scaleway - Paris, France in FR. The domain was registered 9796 days ago through OVH sas. 1 domain and 1 IP were contacted. 17 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 8) · Confidence 11%
- Scanned URL:
http://www.hypnotiseur.com/wp-content/plugins/formcraft/file-upload/server/content/files/1614e412315051---gofopoz.pdf - Domain: www.hypnotiseur.com · IP: 51.15.191.158 · AS12876 · FR
- Server: LiteSpeed
- Page title: 404 Not Found
- HTTP status: 404 · text/html
- Registrar: OVH sas · domain age 9796 days · created 1999-10-27
- TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Oct 10 18: · subject CN=isaac.newp.fr
- Scan tier: fast · observed 2026-08-23 02:30:56 UTC
Redirect chain
http://www.hypnotiseur.com/wp-content/plugins/formcraft/file-upload/server/content/files/1614e412315051---gofopoz.pdfhttps://www.hypnotiseur.com/wp-content/plugins/formcraft/file-upload/server/content/files/1614e412315051---gofopoz.pdf
Malware communicating with this URL (17)
These samples were observed contacting or being served from www.hypnotiseur.com. Each links to its full analysis.
- Phishing - referenced ·
d2da61d74a556979d5a90cf0988a2f82· first seen 2026-08-23 - Phishing - referenced ·
4b2b9305c5ce7c186a3c1ae39ae9ee7a· first seen 2026-08-23 - Phishing - referenced ·
00ea972dc577753423e60a9558209e36· first seen 2026-08-21 - Phishing - referenced ·
89fbed6ef745d214cd18d109411e8d30· first seen 2026-08-21 - Phishing - referenced ·
cec5f89e47d7102fdfb62302a056ee71· first seen 2026-08-19 - Phishing - referenced ·
a0df002d6bdb7e3b17119a2bf451b1ca· first seen 2026-08-17 - Phishing - referenced ·
b73f300fba6b822568b0c82eb2aa4344· first seen 2026-08-16 - Phishing - referenced ·
9b81c0348202cb92cbd1f1a4e2c2f84f· first seen 2026-08-16 - Phishing - referenced ·
a300d4fb861cd106ca60fbce419789ec· first seen 2026-08-16 - Phishing - referenced ·
8f711a348da72454b4280256ecd512c1· first seen 2026-08-16 - Phishing - referenced ·
c007af2a108a7ccf75cabc3a249f01d0· first seen 2026-08-15 - Phishing - referenced ·
60e8776fe5308d688779884ba5b99b09· first seen 2026-08-14 - Phishing - referenced ·
a4a92f7c7f014246bb522781a1bf0cca· first seen 2026-08-14 - Phishing - referenced ·
c8f1e636d9e893b666cc937eebc03716· first seen 2026-08-14 - Phishing - referenced ·
445d4f0ef60b37edfe7005cff7be4197· first seen 2026-08-13
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Untrusted certificate (ERR_TLS_CERT_ALTNAME_INVALID)
Detected technologies
- LiteSpeed
Contacted infrastructure
- 51.15.191.158 - AS12876 Scaleway - Paris, France (France)
Observed indicators
- www.hypnotiseur.com
- 51.15.191.158
- https://www.hypnotiseur.com/wp-content/plugins/formcraft/file-upload/server/content/files/1614e412315051---gofopoz.pdf
- https://www.hypnotiseur.com/error_docs/styles.css
- https://www.hypnotiseur.com/
Other scans of www.hypnotiseur.com (4)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 21 Aug 2026 - unknown ·
https://www.hypnotiseur.com/wp-content/plugins/formcraft/file-upload/server/content/files/160f7262a1 - 17 Aug 2026 - unknown ·
http://www.hypnotiseur.com/wp-content/plugins/formcraft/file-upload/server/content/files/16093e2a544 - 16 Aug 2026 - unknown ·
http://www.hypnotiseur.com/wp-content/plugins/formcraft/file-upload/server/content/files/160984cf604 - 13 Aug 2026 - unknown ·
http://www.hypnotiseur.com/wp-content/plugins/formcraft/file-upload/server/content/files/1607a5fe789
Questions about www.hypnotiseur.com
- Is www.hypnotiseur.com safe?
- The scan of www.hypnotiseur.com on 23 Aug 2026 reached no verdict either way (score 8). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.hypnotiseur.com?
- 17 analysed samples communicate with this URL, including Phishing.
- How was www.hypnotiseur.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.hypnotiseur.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan