www.vozilasavozacem.rs - URL scan, 24 Aug 2026
MalwareAnalyzer by Cyble scanned www.vozilasavozacem.rs and returned a unknown verdict (score 12). The page resolved to 194.146.59.202 on mCloud doo in RS. 3 domains and 1 IP were contacted, over 2 HTTP requests. 1 malware sample communicates with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 24 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 12) · Confidence 15%
- Scanned URL:
https://vozilasavozacem.rs/files/noxojutatewofopexajix.pdf - Domain: www.vozilasavozacem.rs · IP: 194.146.59.202 · AS35779 · RS
- Server: LiteSpeed
- Page title: Page Not Found - Iznajmljivanje vozila sa vozačem
- HTTP status: 404 · text/html; charset=UTF-8
- HTTP requests captured: 2
- Scan tier: fast · observed 2026-08-24 06:47:09 UTC
Redirect chain
https://vozilasavozacem.rs/files/noxojutatewofopexajix.pdfhttps://www.vozilasavozacem.rs/files/noxojutatewofopexajix.pdf
Malware communicating with this URL (1)
These samples were observed contacting or being served from www.vozilasavozacem.rs. Each links to its full analysis.
- Phishing - referenced ·
fc6a41169b14b564ed87c386e30315c3· first seen 2026-08-24
Antivirus & YARA (1 of 48 engines)
- YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)
These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.
Why this verdict
- A signature matched text in the page (DLV_HTML_Smuggling) — pages that discuss malware can match, so this alone is not a malicious verdict
Detected technologies
- LiteSpeed
- WordPress
- jQuery
Contacted infrastructure
- 194.146.59.202 - AS35779 mCloud doo (Serbia)
Observed indicators
- www.vozilasavozacem.rs
- gmpg.org
- websajtizrada.rs
- 194.146.59.202
- https://www.vozilasavozacem.rs/files/noxojutatewofopexajix.pdf
- https://gmpg.org/xfn/11
- https://www.vozilasavozacem.rs/feed/
- https://www.vozilasavozacem.rs/comments/feed/
- https://www.vozilasavozacem.rs/wp-content/litespeed/css/0b8fb2ca296cb21851abebc99aa6bf10.css?ver=7b70e
- https://www.vozilasavozacem.rs/wp-includes/js/jquery/jquery.min.js
- https://www.vozilasavozacem.rs/wp-json/
- https://www.vozilasavozacem.rs/xmlrpc.php?rsd
- https://www.vozilasavozacem.rs/wp-content/uploads/2025/11/cropped-cropped-Screenshot-2025-11-05-at-11.07.29-32x32.png
- https://www.vozilasavozacem.rs/wp-content/uploads/2025/11/cropped-cropped-Screenshot-2025-11-05-at-11.07.29-192x192.png
- https://www.vozilasavozacem.rs/wp-content/uploads/2025/11/cropped-cropped-Screenshot-2025-11-05-at-11.07.29-180x180.png
- https://www.vozilasavozacem.rs/
- https://www.vozilasavozacem.rs/#usluge
- https://www.vozilasavozacem.rs/#vozila
- https://www.vozilasavozacem.rs/#cena
- https://www.vozilasavozacem.rs/#vencanja
Questions about www.vozilasavozacem.rs
- Is www.vozilasavozacem.rs safe?
- The scan of www.vozilasavozacem.rs on 24 Aug 2026 reached no verdict either way (score 12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.vozilasavozacem.rs?
- 1 analysed samples communicate with this URL, including Phishing.
- How was www.vozilasavozacem.rs checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.vozilasavozacem.rs
Scanned on MalwareAnalyzer by Cyble · Open interactive scan