Is www.puppometalli.eu safe?

No. MalwareAnalyzer scanned www.puppometalli.eu on 21 Aug 2026 and returned a malicious verdict with a score of 61 out of 100. Treat it as hostile until it is re-checked.

How was www.puppometalli.eu checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.puppometalli.eu - malicious URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned www.puppometalli.eu and returned a malicious verdict (score 61). The page resolved to 52.29.5.131 on A100 ROW GmbH in DE. 5 domains and 1 IP were contacted, over 22 HTTP requests. The request followed 3 redirects before landing. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: malicious (score 61) · Confidence 67%
Scanned URL: http://puppometalli.eu/file/37333558443.pdf
Domain: www.puppometalli.eu · IP: 52.29.5.131 · AS16509 · DE
Server: Apache
Page title: puppometalli
HTTP status: 200 · text/html; charset=UTF-8
HTTP requests captured: 22
Scan tier: fast · observed 2026-08-21 17:42:00 UTC

Redirect chain

http://puppometalli.eu/file/37333558443.pdf
https://puppometalli.eu/file/37333558443.pdf
https://www.puppometalli.eu/file/37333558443.pdf
https://www.puppometalli.eu/

Antivirus & YARA (2 of 47 engines)

YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)
YARA: JPCERT/CC [yara]: JPCERT_LODEINFO (page content)

Why this verdict

2 antivirus/YARA engines flagged the page content: DLV_HTML_Smuggling, JPCERT_LODEINFO
Cross-host redirect chain

Detected technologies

Apache
jQuery

Contacted infrastructure

52.29.5.131 - AS16509 A100 ROW GmbH (Germany)

Observed indicators

www.puppometalli.eu
gmpg.org
fonts.googleapis.com
js.afterpay.com
console.yorapp.it
52.29.5.131
https://www.puppometalli.eu/
https://gmpg.org/xfn/11
https://www.puppometalli.eu/public/box/immagini/13077/old-tool-928989_1920.webp
https://www.puppometalli.eu/public/hotel/immagini/preview/1285/loho.jpg
https://www.puppometalli.eu/version_2/css/flexGrids.css
https://fonts.googleapis.com/css?family=Roboto:400,100,300,300italic,700,900%7CLato
https://www.puppometalli.eu/version_2/css/33/style.css
https://www.puppometalli.eu/version_2/css/33/flexGrids.css
https://www.puppometalli.eu/version_2/css/33/prenotazioni.css
https://www.puppometalli.eu/version_2/css/33/nouislider.css
https://www.puppometalli.eu/version_2/css/33/pop_up_demo.css
https://www.puppometalli.eu/version_2/css/fullcalendar.min.css
https://www.puppometalli.eu/version_2/css/fullcalendar.print.min.css
https://www.puppometalli.eu/cookies/cookie.css

Other scans of www.puppometalli.eu (1)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

21 Aug 2026 - suspicious

Questions about www.puppometalli.eu

Is www.puppometalli.eu safe?: No. MalwareAnalyzer scanned www.puppometalli.eu on 21 Aug 2026 and returned a malicious verdict with a score of 61 out of 100. Treat it as hostile until it is re-checked.
How was www.puppometalli.eu checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.puppometalli.eu

Scanned on MalwareAnalyzer by Cyble · Open interactive scan