Is zawodydrwali.pl safe?

The scan of zawodydrwali.pl on 14 Aug 2026 reached no verdict either way (score 16). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with zawodydrwali.pl?

1 analysed samples communicate with this URL, including Phishing.

How was zawodydrwali.pl checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

zawodydrwali.pl - URL scan, 14 Aug 2026

MalwareAnalyzer by Cyble scanned zawodydrwali.pl and returned a unknown verdict (score 16), categorised as credential-harvest. The page resolved to 148.251.196.10 on Hetzner Online GmbH in DE. 13 domains and 1 IP were contacted, over 2 HTTP requests. 1 malware sample communicates with this URL (Phishing). This is a point-in-time observation from 14 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 16) · Confidence 22%
Scanned URL: http://zawodydrwali.pl/app/webroot/userfiles/file/fafigatodizukokogu.pdf
Domain: zawodydrwali.pl · IP: 148.251.196.10 · AS24940 · DE
Server: LiteSpeed
HTTP status: 404 · text/html; charset=UTF-8
HTTP requests captured: 2
Scan tier: standard · observed 2026-08-14 10:27:35 UTC

Malware communicating with this URL (1)

These samples were observed contacting or being served from zawodydrwali.pl. Each links to its full analysis.

Phishing - referenced · f12775089192865439fb23ba5be2a5c0 · first seen 2026-08-12

Antivirus & YARA (0 of 44 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Served over plaintext HTTP

Detected technologies

LiteSpeed
Google Analytics

Contacted infrastructure

148.251.196.10 - AS24940 Hetzner Online GmbH (Germany)

Observed indicators

zawodydrwali.pl
home.hit.stat24.com
cookiealert.sruu.pl
webfrik.pl
sites
runforest.eu
www.lagow.pl
www.swiebodzin.zielonagora.lasy.gov.pl
www.swiebodzin.pl
zulas.pl
www.drwal.net.pl
www.gazetalesna.pl
www.zachod.pl
148.251.196.10
http://zawodydrwali.pl/app/webroot/userfiles/file/fafigatodizukokogu.pdf
http://zawodydrwali.pl/css/style.css
https://home.hit.stat24.com/_
http://cookiealert.sruu.pl/CookieAlert-latest.min.js
http://webfrik.pl/widget/facebook_slider.html?fb_url=https://www.facebook.com/zawodydrwali&fb_width=290&fb_height=418&fb_faces=true&fb_stream=false&fb_header=true&fb_border=true&fb_theme=light&chx=787&speed=SLOW&fb_pic=logo&position=RIGHT
http://zawodydrwali.pl/

Other scans of zawodydrwali.pl (3)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

20 Aug 2026 - unknown · http://zawodydrwali.pl/app/webroot/userfiles/file/97901662968.pdf
20 Aug 2026 - unknown · http://zawodydrwali.pl/app/webroot/userfiles/file/97901662968.pdf
14 Aug 2026 - unknown

Questions about zawodydrwali.pl

Is zawodydrwali.pl safe?: The scan of zawodydrwali.pl on 14 Aug 2026 reached no verdict either way (score 16). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with zawodydrwali.pl?: 1 analysed samples communicate with this URL, including Phishing.
How was zawodydrwali.pl checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of zawodydrwali.pl

Scanned on MalwareAnalyzer by Cyble · Open interactive scan