Is ferropula.hr safe?

The scan of ferropula.hr on 19 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with ferropula.hr?

1 analysed samples communicate with this URL, including Phishing.

How was ferropula.hr checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

ferropula.hr - URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned ferropula.hr and returned a unknown verdict (score 6), categorised as credential-harvest. The page resolved to 178.218.165.75. 8 domains and 1 IP were contacted, over 8 HTTP requests. 1 malware sample communicates with this URL (Phishing). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 12%
Scanned URL: https://ferropula.hr/files/31991290994.pdf
Domain: ferropula.hr · IP: 178.218.165.75
Server: Apache
HTTP status: 404 · text/html; charset=UTF-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR2 · valid to Oct 29 09: · subject CN=cpanel.ferropula.hr
HTTP requests captured: 8
Scan tier: standard · observed 2026-08-19 16:34:04 UTC

Malware communicating with this URL (1)

These samples were observed contacting or being served from ferropula.hr. Each links to its full analysis.

Phishing - referenced · 07fe4a5a284868147a90ccb5e66721dd · first seen 2026-08-14

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Valid TLS, no impersonation or off-origin credential post

Detected technologies

Apache
jQuery
Bootstrap

Observed indicators

ferropula.hr
use.fontawesome.com
fonts.googleapis.com
fonts.gstatic.com
maps.google.com
cdnjs.cloudflare.com
code.jquery.com
cdn.jsdelivr.net
178.218.165.75
https://ferropula.hr/files/31991290994.pdf
https://ferropula.hr/css/bootstrap.min.css
https://use.fontawesome.com/releases/v5.6.1/css/all.css
https://fonts.googleapis.com/icon?family=Material+Icons
https://ferropula.hr/css/meni.css?v=87659fa6e824b2a059c5ff07832fb75116ee94f3
https://ferropula.hr/css/floatButtons.css?v=87659fa6e824b2a059c5ff07832fb75116ee94f3
https://ferropula.hr/css/moj.css?v=87659fa6e824b2a059c5ff07832fb75116ee94f3
https://ferropula.hr/css/flexslider.css
https://fonts.gstatic.com/
https://fonts.googleapis.com/css2?family=DM+Sans:wght@400;700&display=swap
https://ferropula.hr/css/carousel.css?v=87659fa6e824b2a059c5ff07832fb75116ee94f3

Other scans of ferropula.hr (2)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

22 Aug 2026 - unknown · https://ferropula.hr/files/73555027307.pdf
22 Aug 2026 - unknown · https://ferropula.hr/files/73555027307.pdf

Questions about ferropula.hr

Is ferropula.hr safe?: The scan of ferropula.hr on 19 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with ferropula.hr?: 1 analysed samples communicate with this URL, including Phishing.
How was ferropula.hr checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of ferropula.hr

Scanned on MalwareAnalyzer by Cyble · Open interactive scan