kleiberit.ru - URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned kleiberit.ru and returned a unknown verdict (score 8). The page resolved to 195.24.68.20 on JSC "RU-CENTER" in RU. 5 domains and 1 IP were contacted, over 33 HTTP requests. 3 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 8) · Confidence 11%
- Scanned URL:
http://kleiberit.ru/files/file/31551223494.pdf - Domain: kleiberit.ru · IP: 195.24.68.20 · AS48287 · RU
- Server: openresty
- Page title: Страница не найдена – Официальный сайт KLEIBERIT SE & Сo. KG в России
- HTTP status: 404 · text/html; charset=UTF-8
- TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Oct 13 11: · subject CN=kleiberit.ru
- HTTP requests captured: 33
- Scan tier: fast · observed 2026-08-20 13:06:59 UTC
Redirect chain
http://kleiberit.ru/files/file/31551223494.pdfhttps://kleiberit.ru/files/file/31551223494.pdf
Malware communicating with this URL (3)
These samples were observed contacting or being served from kleiberit.ru. Each links to its full analysis.
- Phishing - referenced ·
1c4b28384bc72df67bd7c9554b09830b· first seen 2026-08-20 - Phishing - referenced ·
ba9b9ae680150d6f4bbbd8c12a9a772a· first seen 2026-08-15 - Phishing - referenced ·
3801e0fe5a6407322da628de33a939ed· first seen 2026-08-13
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Untrusted certificate (UNABLE_TO_GET_ISSUER_CERT_LOCALLY)
Detected technologies
- PHP
- WordPress
- jQuery
Contacted infrastructure
- 195.24.68.20 - AS48287 JSC "RU-CENTER" (Russian Federation)
Observed indicators
- kleiberit.ru
- gmpg.org
- fonts.googleapis.com
- api-maps.yandex.ru
- mc.yandex.ru
- 195.24.68.20
- https://kleiberit.ru/files/file/31551223494.pdf
- https://gmpg.org/xfn/11
- https://kleiberit.ru/xmlrpc.php
- https://kleiberit.ru/wp-content/themes/woodmart/js/libs/ie11CustomProperties.min.js
- https://fonts.googleapis.com/
- https://kleiberit.ru/feed/
- https://kleiberit.ru/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-11.0.1
- https://kleiberit.ru/wp-content/plugins/bg-rutube-embed/css/bg_rutube.css?ver=1.6.3
- https://kleiberit.ru/wp-content/plugins/page-list/css/page-list.css?ver=6.3
- https://kleiberit.ru/wp-content/plugins/tablepress/css/build/default.css?ver=3.3.4
- https://kleiberit.ru/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=8.4.1
- https://kleiberit.ru/wp-content/themes/woodmart/css/bootstrap-light.min.css?ver=7.2.4
- https://kleiberit.ru/wp-content/themes/woodmart/css/parts/base.min.css?ver=7.2.4
- https://kleiberit.ru/wp-content/themes/woodmart/css/parts/widget-wd-recent-posts.min.css?ver=7.2.4
Other scans of kleiberit.ru (1)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 20 Aug 2026 - unknown
Questions about kleiberit.ru
- Is kleiberit.ru safe?
- The scan of kleiberit.ru on 20 Aug 2026 reached no verdict either way (score 8). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with kleiberit.ru?
- 3 analysed samples communicate with this URL, including Phishing.
- How was kleiberit.ru checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of kleiberit.ru
Scanned on MalwareAnalyzer by Cyble · Open interactive scan