gibkrakow.pl - URL scan, 14 Aug 2026
MalwareAnalyzer by Cyble scanned gibkrakow.pl and returned a unknown verdict (score 6). The page resolved to 94.152.128.213 on Cyber_Folks S.A. in PL. The domain was registered 5513 days ago through nazwa.pl sp. z o.o.. 3 domains and 1 IP were contacted, over 5 HTTP requests. 2 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 14 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 9%
- Scanned URL:
http://gibkrakow.pl/uploads/files/lexale.pdf - Domain: gibkrakow.pl · IP: 94.152.128.213 · AS29522 · PL
- Server: nginx
- Page title: Galicyjska Izba Budownictwa
- HTTP status: 404 · text/html; charset=utf-8
- Registrar: nazwa.pl sp. z o.o. · domain age 5513 days · created 2011-07-11
- Registrant country: pl
- HTTP requests captured: 5
- Scan tier: fast · observed 2026-08-14 16:38:17 UTC
Malware communicating with this URL (2)
These samples were observed contacting or being served from gibkrakow.pl. Each links to its full analysis.
- Phishing - referenced ·
8681dd3906746dbfed34e30d71ee6ed4· first seen 2026-08-14 - Phishing - referenced ·
8a39769acdfdb71d16c33579fd77b217· first seen 2026-08-14
Antivirus & YARA (0 of 44 engines)
No engine flagged this page's content.
Why this verdict
- Served over plaintext HTTP
Detected technologies
- Nginx
- jQuery
Contacted infrastructure
- 94.152.128.213 - AS29522 Cyber_Folks S.A. (Poland)
Observed indicators
- gibkrakow.pl
- fonts.googleapis.com
- www.symfony-project.org
- 94.152.128.213
- http://gibkrakow.pl/uploads/files/lexale.pdf
- http://gibkrakow.pl/css/reset.css
- http://fonts.googleapis.com/css?family=Open+Sans:300,600&subset=latin,latin-ext
- http://gibkrakow.pl/js/fancybox/jquery.fancybox-1.3.4.css
- http://gibkrakow.pl/css/main.css
- http://gibkrakow.pl/sf/sf_default/css/screen.css
- http://gibkrakow.pl/js/jquery-1.6.2.min.js
- http://gibkrakow.pl/js/fancybox/jquery.fancybox-1.3.4.pack.js
- http://gibkrakow.pl/js/jquery-ui-1.8.16.custom.min.js
- http://gibkrakow.pl/js/jquery.cycle.all.js
- http://gibkrakow.pl/js/script.js
- http://gibkrakow.pl/favicon.ico
- http://gibkrakow.pl/sf/sf_default/css/ie.css
- http://www.symfony-project.org/
- http://gibkrakow.pl/sf/sf_default/images/sfTLogo.png
- http://gibkrakow.pl/sf/sf_default/images/icons/cancel48.png
Other scans of gibkrakow.pl (4)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 20 Aug 2026 - unknown ·
http://gibkrakow.pl/uploads/files/58523809477.pdf - 20 Aug 2026 - unknown ·
http://gibkrakow.pl/uploads/files/58523809477.pdf - 14 Aug 2026 - unknown
- 14 Aug 2026 - unknown
Questions about gibkrakow.pl
- Is gibkrakow.pl safe?
- The scan of gibkrakow.pl on 14 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with gibkrakow.pl?
- 2 analysed samples communicate with this URL, including Phishing.
- How was gibkrakow.pl checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of gibkrakow.pl
Scanned on MalwareAnalyzer by Cyble · Open interactive scan