Is www.michaelhirt.at safe?

No. MalwareAnalyzer scanned www.michaelhirt.at on 20 Aug 2026 and returned a malicious verdict with a score of 77 out of 100. Treat it as hostile until it is re-checked.

How was www.michaelhirt.at checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.michaelhirt.at - malicious URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned www.michaelhirt.at and returned a malicious verdict (score 77). The page resolved to 162.159.129.70 on Cloudflare, Inc. in US. 14 domains and 7 IPs were contacted, over 36 HTTP requests. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 77) · Confidence 83%
Scanned URL: https://www.michaelhirt.at/
Domain: www.michaelhirt.at · IP: 162.159.129.70 · AS13335 · US
Server: cloudflare
Page title: An der Spitze der Management-Revolution. - Dr. Michael Hirt
HTTP status: 200 · text/html; charset=UTF-8
TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Nov 15 17: · subject CN=www.michaelhirt.at
HTTP requests captured: 36 · cookies set: 7 · outgoing links: 28
Scan tier: standard · observed 2026-08-20 16:14:06 UTC

Antivirus & YARA (1 of 47 engines)

YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)

Why this verdict

Antivirus/YARA detection in page content: DLV_HTML_Smuggling
Runtime data beacon to at.prod.jimdo.systems

Detected technologies

Cloudflare
Google Analytics

Contacted infrastructure

162.159.129.70 - AS13335 Cloudflare, Inc. (United States)
162.159.128.70 - AS13335 Cloudflare, Inc. (United States)
142.250.195.174 - AS15169 Google LLC (India)

Observed indicators

www.michaelhirt.at
u.jimcdn.com
assets.jimstatic.com
image.jimcdn.com
s7.addthis.com
www.hirtandfriends.at
www.facebook.com
www.youtube.com
www.xing.com
at.linkedin.com
cms.e.jimdo.com
a.jimdo.com
www.google-analytics.com
at.prod.jimdo.systems
162.159.129.70
162.159.128.70
172.64.146.218
104.18.33.187
172.64.154.69
142.250.195.174

Questions about www.michaelhirt.at

Is www.michaelhirt.at safe?: No. MalwareAnalyzer scanned www.michaelhirt.at on 20 Aug 2026 and returned a malicious verdict with a score of 77 out of 100. Treat it as hostile until it is re-checked.
How was www.michaelhirt.at checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.michaelhirt.at

Scanned on MalwareAnalyzer by Cyble · Open interactive scan