mrukseo.pl - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned mrukseo.pl and returned a unknown verdict (score 0). The page resolved to 185.204.218.140 on CF-Shared-Hosting GD in PL. 8 domains and 1 IP were contacted, over 21 HTTP requests. The request followed 1 redirect before landing. This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 6%
- Scanned URL:
http://mrukseo.pl/userfiles/file/19348222196.pdf - Domain: mrukseo.pl · IP: 185.204.218.140 · AS41079 · PL
- Server: LiteSpeed
- Page title: Strona nie została znaleziona - Skuteczne pozycjonowanie stron z MrukSEO
- HTTP status: 404 · text/html; charset=UTF-8
- TLS issuer: C=US, O=Let's Encrypt, CN=YE2 · valid to Sep 22 00: · subject CN=mail.mrukseo.pl
- HTTP requests captured: 21
- Scan tier: standard · observed 2026-08-19 19:38:39 UTC
Redirect chain
http://mrukseo.pl/userfiles/file/19348222196.pdfhttps://mrukseo.pl/userfiles/file/19348222196.pdf
Antivirus & YARA (1 of 47 engines)
- YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)
These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
- A signature matched text in the page (DLV_HTML_Smuggling) — pages that discuss malware can match, so this alone is not a malicious verdict
Detected technologies
- LiteSpeed
- WordPress
- Google Analytics
- jQuery
- Bootstrap
Contacted infrastructure
- 185.204.218.140 - AS41079 CF-Shared-Hosting GD (Poland)
Observed indicators
- mrukseo.pl
- gmpg.org
- fonts.googleapis.com
- fonts.gstatic.com
- nowa.mrukseo.pl
- www.facebook.com
- www.mafil.eu
- cookiedatabase.org
- 185.204.218.140
- https://mrukseo.pl/userfiles/file/19348222196.pdf
- https://gmpg.org/xfn/11
- https://fonts.googleapis.com/css?family=Nunito:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i%7CRoboto:100,100i,200,200i,300,300i,400,400i,500,500i,600,600i,700,700i,800,800i,900,900i
- https://fonts.googleapis.com/
- https://fonts.gstatic.com/
- https://mrukseo.pl/feed/
- https://mrukseo.pl/comments/feed/
- https://mrukseo.pl/wp-content/plugins/LayerSlider/assets/static/layerslider/css/layerslider.css?ver=7.14.4
- https://mrukseo.pl/wp-includes/css/dist/block-library/style.min.css?ver=6.9.7
- https://mrukseo.pl/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5
- https://mrukseo.pl/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=10.6.1
Other scans of mrukseo.pl (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 22 Aug 2026 - unknown ·
https://mrukseo.pl/userfiles/file/44526360326.pdf - 19 Aug 2026 - unknown
Questions about mrukseo.pl
- Is mrukseo.pl safe?
- The scan of mrukseo.pl on 19 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- How was mrukseo.pl checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of mrukseo.pl
Scanned on MalwareAnalyzer by Cyble · Open interactive scan