bielwod.com - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned bielwod.com and returned a unknown verdict (score 6). The page resolved to 176.32.162.200 on Lingua-IT Sp. z o.o. in PL. The domain was registered 7884 days ago through PDR Ltd. d/b/a PublicDomainRegistry.com. 5 domains and 1 IP were contacted, over 5 HTTP requests. 3 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 9%
- Scanned URL:
http://bielwod.com/userfiles/file/90088359742.pdf - Domain: bielwod.com · IP: 176.32.162.200 · AS28978 · PL
- Server: Apache
- Page title: . . . : : : B i e l W o d baseny, fontanny, oase, oczka wodne, kolektory słoneczne : : : . . .
- HTTP status: 200 · text/html
- Registrar: PDR Ltd. d/b/a PublicDomainRegistry.com · domain age 7884 days · created 2005-01-18
- HTTP requests captured: 5
- Scan tier: standard · observed 2026-08-21 04:05:53 UTC
Malware communicating with this URL (3)
These samples were observed contacting or being served from bielwod.com. Each links to its full analysis.
- Phishing - referenced ·
f67bc4cf745b9c10210fdb983a5354f0· first seen 2026-08-15 - Phishing - referenced ·
b0e1c82516d4761b4eb649f270be9c4f· first seen 2026-08-13 - Phishing - referenced ·
f5eb4ca1644ff5f6dfc56c263159de2f· first seen 2026-08-11
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Served over plaintext HTTP
Detected technologies
- Apache
- Google Analytics
- jQuery
Contacted infrastructure
- 176.32.162.200 - AS28978 Lingua-IT Sp. z o.o. (Poland)
Observed indicators
- bielwod.com
- www.bielwod.com
- www.sklep.bielwod.com
- www.replica-orologi-di-lusso.com
- www.optimal.net.pl
- 176.32.162.200
- http://bielwod.com/userfiles/file/90088359742.pdf
- http://bielwod.com/userfiles/file/js/standard.jsx
- http://bielwod.com/userfiles/file/js/AC_RunActiveContent.jsx
- http://bielwod.com/userfiles/file/js/plugins.jsx
- http://bielwod.com/userfiles/file/nivoslider/themes/default/default.css
- http://bielwod.com/userfiles/file/nivoslider/nivo-slider.css
- http://bielwod.com/userfiles/file/nivoslider/scripts/jquery-1.9.0.min.js
- http://bielwod.com/userfiles/file/nivoslider/jquery.nivo.slider.js
- http://bielwod.com/userfiles/file/templates/img/baseny.jpg
- http://bielwod.com/userfiles/file/templates/img/photo_0.jpg
- http://bielwod.com/userfiles/file/templates/img/photo_1.jpg
- http://bielwod.com/userfiles/file/templates/img/photo_2.jpg
- http://www.bielwod.com/
- http://bielwod.com/userfiles/file/templates/img/logo.jpg
Other scans of bielwod.com (1)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 11 Aug 2026 - unknown ·
http://bielwod.com/userfiles/file/wexopiladu.pdf
Questions about bielwod.com
- Is bielwod.com safe?
- The scan of bielwod.com on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with bielwod.com?
- 3 analysed samples communicate with this URL, including Phishing.
- How was bielwod.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of bielwod.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan