sigmabhp.pl - URL scan, 14 Aug 2026
MalwareAnalyzer by Cyble scanned sigmabhp.pl and returned a unknown verdict (score 0). The page resolved to 85.128.197.12 on webhosting servers in PL. 4 domains and 1 IP were contacted, over 13 HTTP requests. The request followed 1 redirect before landing. This is a point-in-time observation from 14 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 6%
- Scanned URL:
http://sigmabhp.pl/userfiles/file/dafugapanimij.pdf - Domain: sigmabhp.pl · IP: 85.128.197.12 · AS15967 · PL
- Server: Apache/2
- Page title: Strona nie została znaleziona – Sigma BHP
- HTTP status: 404 · text/html; charset=UTF-8
- TLS issuer: C=US, O=Let's Encrypt, CN=YE1 · valid to Sep 5 18: · subject CN=sigmabhp.pl
- HTTP requests captured: 13
- Scan tier: standard · observed 2026-08-14 13:26:53 UTC
Redirect chain
http://sigmabhp.pl/userfiles/file/dafugapanimij.pdfhttps://sigmabhp.pl/userfiles/file/dafugapanimij.pdf
Antivirus & YARA (1 of 44 engines)
- YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)
These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
- A signature matched text in the page (DLV_HTML_Smuggling) — pages that discuss malware can match, so this alone is not a malicious verdict
Detected technologies
- Apache
- WordPress
- jQuery
Contacted infrastructure
- 85.128.197.12 - AS15967 webhosting servers (Poland)
Observed indicators
- sigmabhp.pl
- gmpg.org
- fonts.googleapis.com
- www.famethemes.com
- 85.128.197.12
- https://sigmabhp.pl/userfiles/file/dafugapanimij.pdf
- https://gmpg.org/xfn/11
- https://fonts.googleapis.com/
- https://sigmabhp.pl/feed/
- https://sigmabhp.pl/comments/feed/
- https://fonts.googleapis.com/css?family=Raleway%3A400%2C500%2C600%2C700%2C300%2C100%2C800%2C900%7COpen+Sans%3A400%2C300%2C300italic%2C400italic%2C600%2C600italic%2C700%2C700italic&subset=latin%2Clatin-ext&display=swap&ver=2.3.21
- https://sigmabhp.pl/wp-content/themes/onepress/assets/frontend/lightgallery.css?ver=bf7c61378f839a6c2348
- https://sigmabhp.pl/wp-content/themes/onepress/assets/frontend/theme.css?ver=b7efae94b44455f36531
- https://sigmabhp.pl/wp-content/plugins/wp-letsencrypt-ssl/admin/js/jsredirect.js?ver=7.8.7.3
- https://sigmabhp.pl/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
- https://sigmabhp.pl/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
- https://sigmabhp.pl/wp-json/
- https://sigmabhp.pl/xmlrpc.php?rsd
- https://sigmabhp.pl/wp-content/uploads/2024/02/cropped-baner-32x32.jpg
- https://sigmabhp.pl/wp-content/uploads/2024/02/cropped-baner-192x192.jpg
Other scans of sigmabhp.pl (4)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 22 Aug 2026 - unknown ·
https://sigmabhp.pl/userfiles/file/fekuvosopiwugax.pdf - 22 Aug 2026 - unknown ·
https://sigmabhp.pl/userfiles/file/fekuvosopiwugax.pdf - 14 Aug 2026 - unknown ·
https://sigmabhp.pl/userfiles/file/71287646536.pdf - 14 Aug 2026 - unknown
Questions about sigmabhp.pl
- Is sigmabhp.pl safe?
- The scan of sigmabhp.pl on 14 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- How was sigmabhp.pl checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of sigmabhp.pl
Scanned on MalwareAnalyzer by Cyble · Open interactive scan