counter.yadro.ru - URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned counter.yadro.ru and returned a unknown verdict (score -12). The page resolved to 88.212.201.204 on EDINAYA SET LIMITED LIABILITY COMPANY in RU. 1 domain and 1 IP were contacted. 23 malware samples communicate with this URL (Coinminer). This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://counter.yadro.ru/ - Domain: counter.yadro.ru · IP: 88.212.201.204 · AS39134 · RU
- Server: nginx/1.17.9
- HTTP status: 200 · text/html; charset=utf-8
- TLS issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign GCC R6 AlphaSSL CA 2025 · valid to Feb 4 07: · subject CN=counter.yadro.ru
- Scan tier: fast · observed 2026-08-20 07:42:04 UTC
Malware communicating with this URL (23)
These samples were observed contacting or being served from counter.yadro.ru. Each links to its full analysis.
- bd83cffdb5446f38b8057627972749c7761da701db16c446f4afa6447bd154b3 - referenced ·
bd83cffdb5446f38b8057627972749c7· first seen 2026-08-20 - Coinminer - referenced ·
257d36184d5745398fb026d060de4531· first seen 2026-08-19 - 6adfecbbfe26c19e68d5106b87acbb7e44db3132fed0956fe50f7520c8f97efa - referenced ·
6adfecbbfe26c19e68d5106b87acbb7e· first seen 2026-08-17 - 6ad8f9ffae51775c4046d5b7292619facb382c9c40e03e2e45d4ffe3f7d6f592 - referenced ·
6ad8f9ffae51775c4046d5b7292619fa· first seen 2026-08-17 - 11b95751d5b8420221b0f0ae1b456cd43b8db135a22338793ca23679388b73c7 - referenced ·
11b95751d5b8420221b0f0ae1b456cd4· first seen 2026-08-17 - 11bc0bd9cb8e777b55b92b4460847e070eae3076ec547bbacc305e2d40d27f1e - referenced ·
11bc0bd9cb8e777b55b92b4460847e07· first seen 2026-08-17 - 11bb83c6b72532e97ca84ffcd11900921d9d48f37afe7081e2878077a48e4c4d - referenced ·
11bb83c6b72532e97ca84ffcd1190092· first seen 2026-08-16 - 11b3d9f610f6fec8dfa3f884a8d7f888abcb22929609846ac0059fdaec548e2c - referenced ·
11b3d9f610f6fec8dfa3f884a8d7f888· first seen 2026-08-16 - 11bc9063ec277612d9d445347f86a3add0f432e5494b2842b6178eff16d73ee3 - referenced ·
11bc9063ec277612d9d445347f86a3ad· first seen 2026-08-16 - 408dda27d76e7e94028a012e035dcdc88cdd3541c0e376552beb2cc4ff399470 - referenced ·
408dda27d76e7e94028a012e035dcdc8· first seen 2026-08-16 - f55c3a3aaa59ff8d0d44ed262a19c90466c2a9c18399a9e3fd8da3cf8498033c - referenced ·
f55c3a3aaa59ff8d0d44ed262a19c904· first seen 2026-08-15 - f55c96a11f89cf3462b6b2990fd5af0ed6677a6a0c5b835fea1056e0245b3e29 - referenced ·
f55c96a11f89cf3462b6b2990fd5af0e· first seen 2026-08-15 - f55320fc737465bbe0af20451106c245ecc12b4aa757954df114b1f63286e030 - referenced ·
f55320fc737465bbe0af20451106c245· first seen 2026-08-15 - f55d0f6e940d09b92ea0d24be1ad8d28ed81c7ec2021bf3f46ecd316220de0f5 - referenced ·
f55d0f6e940d09b92ea0d24be1ad8d28· first seen 2026-08-15 - 5028ea147dc460ab566ae4ee6cfcee4f90eca4981466f95f017570c8defdbe02 - referenced ·
5028ea147dc460ab566ae4ee6cfcee4f· first seen 2026-08-14
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Nginx
Contacted infrastructure
- 88.212.201.204 - AS39134 EDINAYA SET LIMITED LIABILITY COMPANY (Russian Federation)
Observed indicators
- counter.yadro.ru
- 88.212.201.204
- https://counter.yadro.ru/
Other scans of counter.yadro.ru (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown ·
https://stories-of-success.ru/ - 23 Aug 2026 - suspicious ·
https://s.severstroysnab.ru/ - 23 Aug 2026 - unknown ·
https://onlineserver.at.ua/ - 23 Aug 2026 - unknown ·
https://boilerservis.ru/uploads/files/timunilixive.pdf - 22 Aug 2026 - unknown ·
https://evilclowns.narod.ru/clowngames.htm - 22 Aug 2026 - unknown ·
https://evilclowns.narod.ru/music.htm - 22 Aug 2026 - unknown ·
https://natalis-foto.3dn.ru/photo/videosjomka/35 - 22 Aug 2026 - suspicious ·
https://hi-tech.mail.ru/pic_original/6aa4e955d5fcec88256c34bc0094c7c6/54927/ - 22 Aug 2026 - unknown ·
http://cheliabinsk.realxenon.ru/uploads/files/51459646095.pdf - 22 Aug 2026 - unknown ·
http://cheliabinsk.realxenon.ru/uploads/files/51459646095.pdf
Questions about counter.yadro.ru
- Is counter.yadro.ru safe?
- The scan of counter.yadro.ru on 20 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with counter.yadro.ru?
- 23 analysed samples communicate with this URL, including Coinminer.
- How was counter.yadro.ru checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of counter.yadro.ru
Scanned on MalwareAnalyzer by Cyble · Open interactive scan