Is china-zub.ru safe?

The scan of china-zub.ru on 23 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with china-zub.ru?

5 analysed samples communicate with this URL, including Phishing.

How was china-zub.ru checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

china-zub.ru - URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned china-zub.ru and returned a unknown verdict (score 6). The page resolved to 5.45.118.95 on Network for hosting services in EE. 1 domain and 1 IP were contacted. 5 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: http://china-zub.ru/userfiles/file/forefupemobuwobavojinu.pdf
Domain: china-zub.ru · IP: 5.45.118.95 · AS198068 · EE
Server: nginx/1.12.1
Page title: Page Not Found - 404 Error Page
HTTP status: 404 · text/html; charset=UTF-8
Scan tier: fast · observed 2026-08-23 14:32:27 UTC

Redirect chain

http://china-zub.ru/userfiles/file/forefupemobuwobavojinu.pdf
http://china-zub.ru/404.php

Malware communicating with this URL (5)

These samples were observed contacting or being served from china-zub.ru. Each links to its full analysis.

Phishing - referenced · 06f00997a388f7aa6b2aef0003bc6b79 · first seen 2026-08-23
Phishing - referenced · 966ce79f43b30db9006e6ffbcaf6f622 · first seen 2026-08-23
Phishing - referenced · 8769071e211c02db3d1812032999d679 · first seen 2026-08-20
Phishing - referenced · 8594c6db59e7df8a8236bf44bbe3683c · first seen 2026-08-20
Phishing - referenced · eb736f50daa968308cf4eb92f4633b6a · first seen 2026-08-20

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Served over plaintext HTTP

Detected technologies

Nginx
PHP

Contacted infrastructure

5.45.118.95 - AS198068 Network for hosting services (Estonia)

Observed indicators

china-zub.ru
5.45.118.95
http://china-zub.ru/404.php

Other scans of china-zub.ru (7)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

24 Aug 2026 - unknown
23 Aug 2026 - unknown
23 Aug 2026 - unknown
20 Aug 2026 - unknown
20 Aug 2026 - unknown
20 Aug 2026 - unknown
20 Aug 2026 - unknown

Questions about china-zub.ru

Is china-zub.ru safe?: The scan of china-zub.ru on 23 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with china-zub.ru?: 5 analysed samples communicate with this URL, including Phishing.
How was china-zub.ru checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of china-zub.ru

Scanned on MalwareAnalyzer by Cyble · Open interactive scan