The scan of eltprof.ru on 19 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with eltprof.ru?

2 analysed samples communicate with this URL, including Phishing.

How was eltprof.ru checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

eltprof.ru - URL scan, 19 Aug 2026

MalwareAnalyzer by Cyble scanned eltprof.ru and returned a unknown verdict (score 6). The page resolved to 46.149.227.220 on MAGELLAN-AS - Magellan Telecom Kuzbass Ltd., RU in RU. 3 domains and 1 IP were contacted, over 5 HTTP requests. 2 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: http://eltprof.ru/userfiles/file/20994965054.pdf
Domain: eltprof.ru · IP: 46.149.227.220 · AS52175 · RU
Server: nginx/1.21.1
Page title: Эльт-проф. Ошибка 404 — страница не найдена
HTTP status: 200 · text/html; charset=utf-8
HTTP requests captured: 5
Scan tier: fast · observed 2026-08-19 17:31:35 UTC

Malware communicating with this URL (2)

These samples were observed contacting or being served from eltprof.ru. Each links to its full analysis.

Phishing - referenced · 3c21a06df6dcf3f1900d060d2e9902b3 · first seen 2026-08-19
Phishing - referenced · eb10c5ac3ce9a3ff5dca299016135561 · first seen 2026-08-15

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Served over plaintext HTTP

Detected technologies

Nginx
PHP
jQuery

Contacted infrastructure

46.149.227.220 - AS52175 MAGELLAN-AS - Magellan Telecom Kuzbass Ltd., RU (RU)

Observed indicators

eltprof.ru
code.jquery.com
hmskemerovo.ru
46.149.227.220
http://eltprof.ru/userfiles/file/20994965054.pdf
http://eltprof.ru/css/style.css?v=1
http://eltprof.ru/css/lightbox.css
http://eltprof.ru/scripts/ie.js
http://eltprof.ru/js/prototype.js
http://eltprof.ru/js/scriptaculous.js?load=effects,builder
http://eltprof.ru/js/lightbox.js
http://code.jquery.com/jquery-1.10.2.js
http://eltprof.ru/
http://eltprof.ru/contacts.html
http://eltprof.ru/objects.html
http://eltprof.ru/uslugi.html
http://eltprof.ru/plastokn.html
http://eltprof.ru/balkoni.html
http://hmskemerovo.ru/
http://eltprof.ru/media/images/image1.jpg

Other scans of eltprof.ru (4)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

19 Aug 2026 - unknown
19 Aug 2026 - unknown
15 Aug 2026 - unknown · http://eltprof.ru/userfiles/file/20567246090.pdf
15 Aug 2026 - unknown · http://eltprof.ru/userfiles/file/20567246090.pdf

Questions about eltprof.ru

Is eltprof.ru safe?: The scan of eltprof.ru on 19 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with eltprof.ru?: 2 analysed samples communicate with this URL, including Phishing.
How was eltprof.ru checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of eltprof.ru

Scanned on MalwareAnalyzer by Cyble · Open interactive scan