Is www.sapaengineering.kz safe?

No. MalwareAnalyzer scanned www.sapaengineering.kz on 20 Aug 2026 and returned a suspicious verdict with a score of 20 out of 100. Treat it as hostile until it is re-checked.

What malware is associated with www.sapaengineering.kz?

2 analysed samples communicate with this URL.

How was www.sapaengineering.kz checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

www.sapaengineering.kz - suspicious URL scan, 20 Aug 2026

MalwareAnalyzer by Cyble scanned www.sapaengineering.kz and returned a suspicious verdict (score 20). The page resolved to 185.98.5.182 on Hoster-AST - LLP _Kompaniya Hoster.KZ_, KZ in KZ. 1 domain and 1 IP were contacted. 2 malware samples communicate with this URL. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 20) · Confidence 26%
Scanned URL: http://www.sapaengineering.kz/images/lego-roblox-hacking.pdf
Domain: www.sapaengineering.kz · IP: 185.98.5.182 · AS207333 · KZ
Server: nginx
HTTP status: 200 · application/pdf
Scan tier: fast · observed 2026-08-20 22:01:34 UTC

Malware communicating with this URL (2)

These samples were observed contacting or being served from www.sapaengineering.kz. Each links to its full analysis.

3b347f48927d0860b95b769de212c15edbae4649c97fa462bcee814de137adc3 - referenced · 3b347f48927d0860b95b769de212c15e · first seen 2026-08-20
328fa0a09ea322851f35220696d1e09c58d1fae738acb026e3a851c5e72fa0dc - referenced · 328fa0a09ea322851f35220696d1e09c · first seen 2026-08-17

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

File download routed to the malware sandbox (lego-roblox-hacking.pdf)
Served over plaintext HTTP

Detected technologies

Nginx

Contacted infrastructure

185.98.5.182 - AS207333 Hoster-AST - LLP _Kompaniya Hoster.KZ_, KZ (KZ)

Files served by this page

lego-roblox-hacking.pdf · 09dcbd5c21ff6f9f11ac12b59cef6b55

Observed indicators

www.sapaengineering.kz
185.98.5.182
http://www.sapaengineering.kz/images/lego-roblox-hacking.pdf

Other scans of www.sapaengineering.kz (1)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

20 Aug 2026 - suspicious

Questions about www.sapaengineering.kz

Is www.sapaengineering.kz safe?: No. MalwareAnalyzer scanned www.sapaengineering.kz on 20 Aug 2026 and returned a suspicious verdict with a score of 20 out of 100. Treat it as hostile until it is re-checked.
What malware is associated with www.sapaengineering.kz?: 2 analysed samples communicate with this URL.
How was www.sapaengineering.kz checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of www.sapaengineering.kz

Scanned on MalwareAnalyzer by Cyble · Open interactive scan