crewmak.ru - URL scan, 23 Aug 2026
MalwareAnalyzer by Cyble scanned crewmak.ru and returned a unknown verdict (score -12). The page resolved to 103.224.182.253 on Trellian Pty. Limited in US. 1 domain and 1 IP were contacted, over 1 HTTP request. 53 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 23 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score -12) · Confidence 15%
- Scanned URL:
https://crewmak.ru/uplcv?utm_term=cyberlink+pro+apk - Domain: crewmak.ru · IP: 103.224.182.253 · AS133618 · US
- Server: Apache
- Page title: crewmak.ru
- HTTP status: 200 · text/html; charset=UTF-8
- TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 6 20: · subject CN=37.pl
- HTTP requests captured: 1
- Scan tier: standard · observed 2026-08-23 07:35:07 UTC
Malware communicating with this URL (53)
These samples were observed contacting or being served from crewmak.ru. Each links to its full analysis.
- Phishing - referenced ·
8748a4373e04285f7d0279ea99841910· first seen 2026-08-22 - Phishing - referenced ·
754327cf44833181cd1b32f99b5ec997· first seen 2026-08-22 - Phishing - referenced ·
a85d2d927b6d58db884a51a1c0b293eb· first seen 2026-08-22 - Phishing - referenced ·
4f998aeac9f9105ed84ae61358b1aed9· first seen 2026-08-22 - Phishing - referenced ·
0367541d25886880a1850198385bf58f· first seen 2026-08-22 - Phishing - referenced ·
b0a7e119a2dbd9e1199ebca69e45e594· first seen 2026-08-22 - Phishing - referenced ·
403225ecd5f5a4ceda6f65e6c406a1f7· first seen 2026-08-22 - Phishing - referenced ·
8c418cc61db27ed9843b8fbcb7bfa2fc· first seen 2026-08-21 - Phishing - referenced ·
bc67f10f5110fee9c272641fe9eb8fe1· first seen 2026-08-21 - Phishing - referenced ·
37cbef5091c8fb92facdf14afe52675c· first seen 2026-08-21 - Phishing - referenced ·
37ec5ce3f8c845a2d2679a4ae1f2c95e· first seen 2026-08-20 - Phishing - referenced ·
ae1901bdde0be9ba664238b15ef24d0e· first seen 2026-08-19 - Phishing - referenced ·
ee73ed442c85dffc7ae048543924dee9· first seen 2026-08-19 - Phishing - referenced ·
692db1ffe45a07c06325ad7821f2cc7f· first seen 2026-08-19 - Phishing - referenced ·
afbd9db022f188dffa7ea0a9ac339c01· first seen 2026-08-19
Antivirus & YARA (0 of 48 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Detected technologies
- Apache
Contacted infrastructure
- 103.224.182.253 - AS133618 Trellian Pty. Limited (United States)
Observed indicators
- crewmak.ru
- 103.224.182.253
- https://crewmak.ru/uplcv?utm_term=cyberlink+pro+apk
- https://crewmak.ru/js/fingerprint/iife.min.js
- http://crewmak.ru/uplcv?utm_term=cyberlink+pro+apk&tr_uuid=20260823-1735-088c-8441-a84ad31a91ad&fp=-3
Other scans of crewmak.ru (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://crewmak.ru/uplcv?utm_term=russian+political+parties - 23 Aug 2026 - unknown ·
https://crewmak.ru/uplcv?utm_term=lilith+in+12th+house+synastry - 23 Aug 2026 - unknown ·
https://crewmak.ru/uplcv?utm_term=1+to+10+random+number - 23 Aug 2026 - unknown ·
https://crewmak.ru/uplcv?utm_term=1+to+10+random+number - 23 Aug 2026 - unknown ·
https://crewmak.ru/pbw?utm_term=general+knowledge+quiz+class+7 - 23 Aug 2026 - unknown ·
https://crewmak.ru/uplcv?utm_term=what+is+the+moon+on+snapchat - 23 Aug 2026 - unknown ·
https://crewmak.ru/uplcv?utm_term=how+to+save+only+1+page+of+a+pdf - 23 Aug 2026 - unknown ·
https://crewmak.ru/uplcv?utm_term=how+to+edit+pictures+on+android+phone - 23 Aug 2026 - unknown ·
https://crewmak.ru/uplcv?utm_term=good+night+emotional+shayari - 23 Aug 2026 - unknown
Questions about crewmak.ru
- Is crewmak.ru safe?
- The scan of crewmak.ru on 23 Aug 2026 reached no verdict either way (score -12). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with crewmak.ru?
- 53 analysed samples communicate with this URL, including Phishing.
- How was crewmak.ru checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of crewmak.ru
Scanned on MalwareAnalyzer by Cyble · Open interactive scan