moda.net.pl - URL scan, 24 Aug 2026
MalwareAnalyzer by Cyble scanned moda.net.pl and returned a unknown verdict (score -12). The page resolved to 172.67.222.252 on Cloudflare, Inc. in US. The domain was registered 8552 days ago through NASK. 1 domain and 1 IP were contacted. 4 malware samples communicate with this URL (Obfus). This is a point-in-time observation from 24 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://moda.net.pl/xmlrpc.php - Domain: moda.net.pl · IP: 172.67.222.252 · AS13335 · US
- Server: cloudflare
- HTTP status: 405 · text/plain;charset=UTF-8
- Registrar: NASK · domain age 8552 days · created 2003-03-25
- Registrant country: PL
- TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Oct 29 10: · subject CN=moda.net.pl
- Evidenced operator: Naukowa i Akademicka Sieć Komputerowa PIB
- Scan tier: fast · observed 2026-08-24 01:17:27 UTC
Malware communicating with this URL (4)
These samples were observed contacting or being served from moda.net.pl. Each links to its full analysis.
- Obfus - referenced ·
b6e9176cfcc00c45695d05f4e2fa22bc· first seen 2026-08-24 - df0cbed9f699bde5b6e5bdd8bb90fb758be8da1da8193f7a1926b723c80f3c3a - referenced ·
df0cbed9f699bde5b6e5bdd8bb90fb75· first seen 2026-08-21 - 6ad2932cbd865d9c095abcbd3df1da4925436141f43573ea0b79b3e540bee36e - referenced ·
6ad2932cbd865d9c095abcbd3df1da49· first seen 2026-08-17 - 502612a9757c1e7582fb441f325c7cf227e273ab3bf183b889ad055c73300696 - referenced ·
502612a9757c1e7582fb441f325c7cf2· first seen 2026-08-14
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Cloudflare
- PHP
Contacted infrastructure
- 172.67.222.252 - AS13335 Cloudflare, Inc. (United States)
Observed indicators
- moda.net.pl
- 172.67.222.252
- https://moda.net.pl/xmlrpc.php
Other scans of moda.net.pl (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://moda.net.pl/ - 24 Aug 2026 - unknown ·
https://moda.net.pl/moda/polecamy/keep-calm-and-wait-for-friday - 21 Aug 2026 - unknown ·
https://moda.net.pl/ - 21 Aug 2026 - unknown ·
https://moda.net.pl/obrazki/2018/11/kolor-wlosow-dla-dojrzalej-kobiety3.jpg - 21 Aug 2026 - unknown ·
https://moda.net.pl/uroda/fryzury/kolory-wlosow-dla-dojrzalych-kobiet - 21 Aug 2026 - unknown
- 17 Aug 2026 - unknown ·
https://moda.net.pl/obrazki/2012/12/Zara-kolekcja- - 17 Aug 2026 - unknown ·
https://moda.net.pl/moda/nowe-kolekcje/kolekcja-swiateczna-zara - 17 Aug 2026 - unknown
- 14 Aug 2026 - unknown ·
https://moda.net.pl/
Questions about moda.net.pl
- Is moda.net.pl safe?
- The scan of moda.net.pl on 24 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with moda.net.pl?
- 4 analysed samples communicate with this URL, including Obfus.
- How was moda.net.pl checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of moda.net.pl
Scanned on MalwareAnalyzer by Cyble · Open interactive scan