www.vit-physio.de - suspicious URL scan, 15 Aug 2026
MalwareAnalyzer by Cyble scanned www.vit-physio.de and returned a suspicious verdict (score 34). The page resolved to 185.60.251.251 on Jimdo GmbH Web Delivery Services in DE. 7 domains and 1 IP were contacted, over 5 HTTP requests. 1 malware sample communicates with this URL (Phishing). The request followed 2 redirects before landing. This is a point-in-time observation from 15 Aug 2026; the page may have changed since.
Scan result
- Verdict: suspicious (score 34) · Confidence 43%
- Scanned URL:
http://vit-physio.de/file/wiboli.pdf - Domain: www.vit-physio.de · IP: 185.60.251.251 · AS44066 · DE
- Server: cloudflare
- Page title: Seite nicht gefunden - Vit Physio Tobias Durlach Physiotherapie Ludwigsburg Poppenweiler
- HTTP status: 404 · text/html; charset=UTF-8
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 28 01: · subject CN=www.vit-physio.de
- HTTP requests captured: 5
- Scan tier: standard · observed 2026-08-15 12:47:33 UTC
Redirect chain
http://vit-physio.de/file/wiboli.pdfhttps://vit-physio.de/file/wiboli.pdfhttps://www.vit-physio.de/file/wiboli.pdf
Malware communicating with this URL (1)
These samples were observed contacting or being served from www.vit-physio.de. Each links to its full analysis.
- Phishing - referenced ·
391683dcbd82372f2b10956f39f7e2f6· first seen 2026-08-15
Antivirus & YARA (1 of 44 engines)
- YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)
These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.
Why this verdict
- Antivirus/YARA detection in page content: DLV_HTML_Smuggling
- Valid TLS, no impersonation or off-origin credential post
- Cross-host redirect chain
Detected technologies
- Cloudflare
Contacted infrastructure
- 185.60.251.251 - AS44066 Jimdo GmbH Web Delivery Services (Germany)
Observed indicators
- www.vit-physio.de
- u.jimcdn.com
- assets.jimstatic.com
- image.jimcdn.com
- fonts.jimstatic.com
- cms.e.jimdo.com
- a.jimdo.com
- 185.60.251.251
- https://www.vit-physio.de/file/wiboli.pdf
- https://u.jimcdn.com/
- https://assets.jimstatic.com/
- https://image.jimcdn.com/
- https://fonts.jimstatic.com/
- https://u.jimcdn.com/cms/o/sd9a0f3cdbc55079f/img/favicon.png?t=1655718689
- https://www.vit-physio.de/not-found/
- https://assets.jimstatic.com/ckies.js.c52961c41c57a9b4f804.js
- https://assets.jimstatic.com/cookieControl.js.0c7250f3957d0aebc70e.js
- https://u.jimcdn.com/cms/o/sd9a0f3cdbc55079f/layout/dm_50ae738d6cf3891a6a05abbe42c76069/css/layout.css?t=1659017663
- https://assets.jimstatic.com/web.css.2f46a8585dcc7a727cd1.css
- https://assets.jimstatic.com/web.js.aded2e4e7cbc056e6a02.js
Other scans of www.vit-physio.de (9)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - suspicious ·
https://www.vit-physio.de/file/52735082338.pdf - 23 Aug 2026 - suspicious ·
https://www.vit-physio.de/file/52735082338.pdf - 16 Aug 2026 - suspicious ·
https://www.vit-physio.de/file/busovuvevavij.pdf - 16 Aug 2026 - suspicious ·
https://www.vit-physio.de/file/busovuvevavij.pdf - 16 Aug 2026 - unknown ·
https://www.vit-physio.de/file/busovuvevavij.pdf - 15 Aug 2026 - suspicious
- 15 Aug 2026 - suspicious
- 15 Aug 2026 - suspicious
- 15 Aug 2026 - suspicious
Questions about www.vit-physio.de
- Is www.vit-physio.de safe?
- No. MalwareAnalyzer scanned www.vit-physio.de on 15 Aug 2026 and returned a suspicious verdict with a score of 34 out of 100. Treat it as hostile until it is re-checked.
- What malware is associated with www.vit-physio.de?
- 1 analysed samples communicate with this URL, including Phishing.
- How was www.vit-physio.de checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.vit-physio.de
Scanned on MalwareAnalyzer by Cyble · Open interactive scan