kurier48.pl - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned kurier48.pl and returned a unknown verdict (score 0). The page resolved to 213.32.22.208 on OVH SAS in FR. The domain was registered 1116 days ago through premium.pl Sp. z o.o.. 2 domains and 1 IP were contacted, over 5 HTTP requests. 3 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 0%
- Scanned URL:
http://kurier48.pl/files/userfiles/file/12803822866.pdf - Domain: kurier48.pl · IP: 213.32.22.208 · AS16276 · FR
- Server: Apache/2
- Page title: Nie znaleziono 404 | Kurier48 - przesyłki kurierskie, usługi kurierskie
- HTTP status: 404 · text/html; charset=UTF-8
- Registrar: premium.pl Sp. z o.o. · domain age 1116 days · created 2023-08-01
- HTTP requests captured: 5
- Scan tier: fast · observed 2026-08-22 00:46:25 UTC
Redirect chain
http://kurier48.pl/files/userfiles/file/12803822866.pdfhttps://kurier48.pl/files/userfiles/file/12803822866.pdf
Malware communicating with this URL (3)
These samples were observed contacting or being served from kurier48.pl. Each links to its full analysis.
- Phishing - referenced ·
db5d7e081ce6d2e8d668da3c4cd7384c· first seen 2026-08-16 - Phishing - referenced ·
09fc1c8282296fffdef2688061d35651· first seen 2026-08-15 - Phishing - referenced ·
f5eb4ca1644ff5f6dfc56c263159de2f· first seen 2026-08-11
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Detected technologies
- Apache
- WordPress
- jQuery
Contacted infrastructure
- 213.32.22.208 - AS16276 OVH SAS (France)
Observed indicators
- kurier48.pl
- fonts.googleapis.com
- 213.32.22.208
- https://kurier48.pl/files/userfiles/file/12803822866.pdf
- https://kurier48.pl/xmlrpc.php
- https://fonts.googleapis.com/
- https://kurier48.pl/feed/
- https://kurier48.pl/comments/feed/
- https://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,700italic,800italic,400,300,600,700,800&subset=latin,latin-ext&display=swap
- https://kurier48.pl/wp-content/et-cache/notfound/et-divi-dynamic.css?ver=1786806648
- https://kurier48.pl/wp-json/
- https://kurier48.pl/xmlrpc.php?rsd
- https://kurier48.pl/wp-content/uploads/2023/08/cropped-kurier48-logo-32x32.jpg
- https://kurier48.pl/wp-content/uploads/2023/08/cropped-kurier48-logo-192x192.jpg
- https://kurier48.pl/wp-content/uploads/2023/08/cropped-kurier48-logo-180x180.jpg
- https://kurier48.pl/wp-content/et-cache/global/et-divi-customizer-global.min.css?ver=1786806647
- https://kurier48.pl/
- https://kurier48.pl/wp-content/uploads/2023/08/kurier48-logo.jpg
- https://kurier48.pl/kurier/kurier-dpd-polska/
- https://kurier48.pl/kurier/kurier-pocztex-kurier48/
Other scans of kurier48.pl (8)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown ·
https://kurier48.pl/files/userfiles/file/77550515538.pdf - 23 Aug 2026 - unknown ·
https://kurier48.pl/files/userfiles/file/77550515538.pdf - 22 Aug 2026 - unknown
- 15 Aug 2026 - unknown ·
https://kurier48.pl/files/userfiles/file/59313873416.pdf - 15 Aug 2026 - unknown ·
https://kurier48.pl/files/userfiles/file/59313873416.pdf - 11 Aug 2026 - unknown ·
https://kurier48.pl/files/userfiles/file/gebuf.pdf - 11 Aug 2026 - unknown ·
https://kurier48.pl/files/userfiles/file/gebuf.pdf - 7 Aug 2026 - unknown ·
https://kurier48.pl/files/userfiles/file/doxinotimosu.pdf
Questions about kurier48.pl
- Is kurier48.pl safe?
- The scan of kurier48.pl on 22 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with kurier48.pl?
- 3 analysed samples communicate with this URL, including Phishing.
- How was kurier48.pl checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of kurier48.pl
Scanned on MalwareAnalyzer by Cyble · Open interactive scan