No. MalwareAnalyzer scanned com.ru on 21 Aug 2026 and returned a suspicious verdict with a score of 46 out of 100. Treat it as hostile until it is re-checked.

How was com.ru checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

com.ru - suspicious URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned com.ru and returned a suspicious verdict (score 46). The page resolved to 178.210.74.11 on RU-CENTER in RU. 7 domains and 6 IPs were contacted, over 17 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: suspicious (score 46) · Confidence 52%
Scanned URL: http://com.ru/
Domain: com.ru · IP: 178.210.74.11 · AS48287 · RU
Server: nginx/1.30.4
Page title: Ошибка - нет ни одного сайта
HTTP status: 503 · text/html
HTTP requests captured: 17 · cookies set: 5 · outgoing links: 9
Scan tier: standard · observed 2026-08-21 21:02:22 UTC

Antivirus & YARA (1 of 47 engines)

YARA: delivr.to detections [yara]: DLV_HTML_Smuggling (page content)

These signatures matched text in the page. Pages that quote or document malware can match them, so on their own they do not make a page malicious.

Why this verdict

Antivirus/YARA detection in page content: DLV_HTML_Smuggling
Served over plaintext HTTP

Detected technologies

Nginx

Contacted infrastructure

178.210.74.11 - AS48287 RU-CENTER (Russian Federation)
142.250.195.234 - AS15169 Google LLC (India)
77.88.44.55 - AS13238 Yandex enterprise network (Russian Federation)
172.217.25.195 - AS15169 Google LLC (Malaysia)

Observed indicators

com.ru
fonts.googleapis.com
yastatic.net
www.nic.ru
yandex.ru
fonts.gstatic.com
an.yandex.ru
178.210.74.11
142.250.195.234
37.9.64.225
77.88.44.55
172.217.25.195
213.180.204.90
http://com.ru/
https://fonts.googleapis.com/css2?family=Noto+Sans:wght@400;700&display=swap
https://yastatic.net/pcode/adfox/loader.js
https://www.nic.ru/
https://www.nic.ru/help/razmeshenie-sajta-na-hostinge_6759.html
https://www.nic.ru/catalog/domains/
https://www.nic.ru/catalog/hosting/vds-vps/

Questions about com.ru

Is com.ru safe?: No. MalwareAnalyzer scanned com.ru on 21 Aug 2026 and returned a suspicious verdict with a score of 46 out of 100. Treat it as hostile until it is re-checked.
How was com.ru checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of com.ru

Scanned on MalwareAnalyzer by Cyble · Open interactive scan