counter.yadro.ru - URL scan, 22 Aug 2026
MalwareAnalyzer by Cyble scanned counter.yadro.ru and returned a unknown verdict (score -12). The page resolved to 88.212.201.198 on EXEPTO-MNT in RU. 1 domain and 1 IP were contacted. 41 malware samples communicate with this URL. This is a point-in-time observation from 22 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://counter.yadro.ru/ - Domain: counter.yadro.ru · IP: 88.212.201.198 · AS39134 · RU
- Server: nginx/1.17.9
- HTTP status: 200 · text/html; charset=utf-8
- TLS issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2025 · valid to Feb 4 07: · subject CN=counter.yadro.ru
- Scan tier: fast · observed 2026-08-22 07:07:08 UTC
Malware communicating with this URL (41)
These samples were observed contacting or being served from counter.yadro.ru. Each links to its full analysis.
- d32abfbd81acad380614eb0510c7dffd6765864e6ca2ecb563e70de85cc8b773 - referenced ·
d32abfbd81acad380614eb0510c7dffd· first seen 2026-08-22 - 3f7815dab64f229062df9b8db9618dd2686296fc2a4e94314adb99a44c9d6e12 - referenced ·
3f7815dab64f229062df9b8db9618dd2· first seen 2026-08-22 - 3f7496e7ad432ede46ff89ecd0af2fd8c17f92054ecf7d967dd65d46e54ffe86 - referenced ·
3f7496e7ad432ede46ff89ecd0af2fd8· first seen 2026-08-22 - c303fc9f3ed34c9adf8bb94d096346f30ef3a3b51ba34ea2e34f17cc16b030b3 - referenced ·
c303fc9f3ed34c9adf8bb94d096346f3· first seen 2026-08-21 - 3f77ba37dcbb8fa9406328f314f065e89bd610203ca236bf7e35be654c1d659b - referenced ·
3f77ba37dcbb8fa9406328f314f065e8· first seen 2026-08-21 - 7e3478b7fdf196da956320cd9535947d66ea606b6a15bd2d388b4966a3ce7335 - referenced ·
7e3478b7fdf196da956320cd9535947d· first seen 2026-08-21 - 323ae4cc191ed12ac3195019504152996a51352f1aab60661a2776f8e9070ba3 - referenced ·
323ae4cc191ed12ac319501950415299· first seen 2026-08-21 - 421bc4d1dff7fb5999a671dd7f77703ef36f2b2a4c1a0bf8eb56126a2f50224f - referenced ·
421bc4d1dff7fb5999a671dd7f77703e· first seen 2026-08-21 - 32321dbe7a75c95d82da4e38a99eba53b44e0312f4accd8a0b4b778963013c66 - referenced ·
32321dbe7a75c95d82da4e38a99eba53· first seen 2026-08-21 - df05fa75685ae17e99280fac72e2d048e9f4cecd55849cc1df27f2d65d78f90a - referenced ·
df05fa75685ae17e99280fac72e2d048· first seen 2026-08-21 - e0d99ad1ff74681cfde88b9eeb6abc04ed820167b38dae2fe238bf8484928def - referenced ·
e0d99ad1ff74681cfde88b9eeb6abc04· first seen 2026-08-21 - dcc87e5ea0588dadd78b9a2443ef3f96454cdc34406bb83bc77839b25043a3b8 - referenced ·
dcc87e5ea0588dadd78b9a2443ef3f96· first seen 2026-08-20 - dcc15c7204b95df284ca7ebc073eb9b40d0bb064bc753d36cd5a41f4fae5229c - referenced ·
dcc15c7204b95df284ca7ebc073eb9b4· first seen 2026-08-20 - bd55bb57e23e1ad7ae6648d024973b331170c8cc36a2526f780920faa37a835b - referenced ·
bd55bb57e23e1ad7ae6648d024973b33· first seen 2026-08-20 - bd5db1acfa5b74e347101f4dc6244ea77a4994b61fd892eed02da7c274a2dcf4 - referenced ·
bd5db1acfa5b74e347101f4dc6244ea7· first seen 2026-08-20
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Nginx
Contacted infrastructure
- 88.212.201.198 - AS39134 EXEPTO-MNT (RU)
Observed indicators
- counter.yadro.ru
- 88.212.201.198
- https://counter.yadro.ru/
Other scans of counter.yadro.ru (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://main.mdsalon.ru/ - 23 Aug 2026 - unknown ·
https://stories-of-success.ru/ - 23 Aug 2026 - suspicious ·
https://s.severstroysnab.ru/ - 23 Aug 2026 - unknown ·
https://onlineserver.at.ua/ - 23 Aug 2026 - unknown ·
https://boilerservis.ru/uploads/files/timunilixive.pdf - 22 Aug 2026 - unknown ·
https://evilclowns.narod.ru/clowngames.htm - 22 Aug 2026 - unknown ·
https://evilclowns.narod.ru/music.htm - 22 Aug 2026 - unknown ·
https://natalis-foto.3dn.ru/photo/videosjomka/35 - 22 Aug 2026 - suspicious ·
https://hi-tech.mail.ru/pic_original/6aa4e955d5fcec88256c34bc0094c7c6/54927/ - 22 Aug 2026 - unknown ·
http://cheliabinsk.realxenon.ru/uploads/files/51459646095.pdf
Questions about counter.yadro.ru
- Is counter.yadro.ru safe?
- The scan of counter.yadro.ru on 22 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with counter.yadro.ru?
- 41 analysed samples communicate with this URL.
- How was counter.yadro.ru checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of counter.yadro.ru
Scanned on MalwareAnalyzer by Cyble · Open interactive scan