Is 38e5bbdfe8be.gdziezjesc.info safe?

The scan of 38e5bbdfe8be.gdziezjesc.info on 23 Aug 2026 reached no verdict either way (score 8). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with 38e5bbdfe8be.gdziezjesc.info?

2 analysed samples communicate with this URL, including Phishing.

How was 38e5bbdfe8be.gdziezjesc.info checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

38e5bbdfe8be.gdziezjesc.info - URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned 38e5bbdfe8be.gdziezjesc.info and returned a unknown verdict (score 8). The page resolved to 94.152.13.94 on Hosting Servers in PL. The domain was registered 7851 days ago through OVH SAS. 1 domain and 1 IP were contacted, over 1 HTTP request. 2 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 8) · Confidence 11%
Scanned URL: https://38e5bbdfe8be.gdziezjesc.info/
Domain: 38e5bbdfe8be.gdziezjesc.info · IP: 94.152.13.94 · AS29522 · PL
Server: nginx
HTTP status: 301 · text/html; charset=UTF-8
Registrar: OVH SAS · domain age 7851 days · created 2005-02-22
TLS issuer: C=US, O=CloudFlare, Inc., OU=CloudFlare Origin SSL Certificate Authority, L=San Francisco, ST=California · valid to Nov 15 09: · subject O=CloudFlare, Inc., OU=CloudFlare Origin CA, CN=CloudFlare Origin Certificate
Evidenced operator: CloudFlare, Inc.
HTTP requests captured: 1 · cookies set: 1
Scan tier: standard · observed 2026-08-23 00:39:56 UTC

Malware communicating with this URL (2)

These samples were observed contacting or being served from 38e5bbdfe8be.gdziezjesc.info. Each links to its full analysis.

Phishing - referenced · 3f68e0ad83a4e5c6fa15471479267a02 · first seen 2026-08-22
Phishing - referenced · f7eaa43d607f36cb4d30c3e6ebb36ca8 · first seen 2026-08-15

Why this verdict

Untrusted certificate (SELF_SIGNED_CERT_IN_CHAIN)

Detected technologies

Nginx

Contacted infrastructure

94.152.13.94 - AS29522 Hosting Servers (Poland)

Observed indicators

38e5bbdfe8be.gdziezjesc.info
94.152.13.94
https://38e5bbdfe8be.gdziezjesc.info/

Other scans of 38e5bbdfe8be.gdziezjesc.info (1)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

22 Aug 2026 - suspicious · https://38e5bbdfe8be.gdziezjesc.info/userfiles/file/sijop.pdf

Questions about 38e5bbdfe8be.gdziezjesc.info

Is 38e5bbdfe8be.gdziezjesc.info safe?: The scan of 38e5bbdfe8be.gdziezjesc.info on 23 Aug 2026 reached no verdict either way (score 8). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with 38e5bbdfe8be.gdziezjesc.info?: 2 analysed samples communicate with this URL, including Phishing.
How was 38e5bbdfe8be.gdziezjesc.info checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of 38e5bbdfe8be.gdziezjesc.info

Scanned on MalwareAnalyzer by Cyble · Open interactive scan