Is ekorepetycje.eu safe?

The scan of ekorepetycje.eu on 22 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with ekorepetycje.eu?

3 analysed samples communicate with this URL, including Phishing.

How was ekorepetycje.eu checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

ekorepetycje.eu - URL scan, 22 Aug 2026

MalwareAnalyzer by Cyble scanned ekorepetycje.eu and returned a unknown verdict (score 6). The page resolved to 85.128.128.104 on VPS and dedicated servers in PL. 4 domains and 1 IP were contacted, over 2 HTTP requests. 3 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 22 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: http://ekorepetycje.eu/Upload/file/wefonusini.pdf
Domain: ekorepetycje.eu · IP: 85.128.128.104 · AS15967 · PL
Server: Apache/2
Page title: Domena ekorepetycje.eu jest utrzymywana na serwerach nazwa.pl
HTTP status: 200 · text/html; charset=UTF-8
HTTP requests captured: 2
Scan tier: standard · observed 2026-08-22 04:06:27 UTC

Malware communicating with this URL (3)

These samples were observed contacting or being served from ekorepetycje.eu. Each links to its full analysis.

Phishing - referenced · 9a5870b00f54d9a8528f90317e776389 · first seen 2026-08-18
Phishing - referenced · 3d2da2ed363445e958bd76ad833dc098 · first seen 2026-08-15
Phishing - referenced · 0dc258cd3d56c45fd72097706315615c · first seen 2026-08-14

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Served over plaintext HTTP

Detected technologies

Apache
jQuery

Contacted infrastructure

85.128.128.104 - AS15967 VPS and dedicated servers (Poland)

Observed indicators

ekorepetycje.eu
ajax.googleapis.com
blackdown.nazwa.pl
static.nazwa.pl
85.128.128.104
http://ekorepetycje.eu/Upload/file/wefonusini.pdf
http://ajax.googleapis.com/ajax/libs/jquery/1.8.0/jquery.min.js
https://blackdown.nazwa.pl/templates/nazwa/blackdown-template-kf/css/style.css?v=35
https://static.nazwa.pl/rotator/blackdown/blackdown.js?v=167

Other scans of ekorepetycje.eu (5)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

22 Aug 2026 - unknown
18 Aug 2026 - unknown · http://ekorepetycje.eu/Upload/file/pixagixugotim.pdf
18 Aug 2026 - unknown · http://ekorepetycje.eu/Upload/file/pixagixugotim.pdf
15 Aug 2026 - unknown · http://ekorepetycje.eu/Upload/file/kifim.pdf
14 Aug 2026 - unknown · http://ekorepetycje.eu/Upload/file/3898847911.pdf

Questions about ekorepetycje.eu

Is ekorepetycje.eu safe?: The scan of ekorepetycje.eu on 22 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with ekorepetycje.eu?: 3 analysed samples communicate with this URL, including Phishing.
How was ekorepetycje.eu checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of ekorepetycje.eu

Scanned on MalwareAnalyzer by Cyble · Open interactive scan