Is mail.bookingcars.ru safe?

The scan of mail.bookingcars.ru on 21 Aug 2026 reached no verdict either way (score 14). Too little was captured to judge it, which is an unknown rather than a pass.

How was mail.bookingcars.ru checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

mail.bookingcars.ru - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned mail.bookingcars.ru and returned a unknown verdict (score 14), categorised as credential-harvest. The page resolved to 167.235.74.173 on Hetzner Online GmbH in DE. 1 domain and 1 IP were contacted, over 21 HTTP requests. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 14) · Confidence 23%
Scanned URL: https://mail.bookingcars.ru/
Domain: mail.bookingcars.ru · IP: 167.235.74.173 · AS24940 · DE
Server: Apache
Page title: Roundcube Webmail :: Welcome to Roundcube Webmail
HTTP status: 200 · text/html; charset=UTF-8
TLS issuer: C=US, O=Let's Encrypt, CN=YR1 · valid to Nov 17 22: · subject CN=mail.bookingcars.ru
HTTP requests captured: 21 · cookies set: 1
Scan tier: standard · observed 2026-08-21 06:30:18 UTC

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Valid TLS, no impersonation or off-origin credential post
Certificate issued < 48h ago

Detected technologies

Apache
jQuery
Bootstrap

Contacted infrastructure

167.235.74.173 - AS24940 Hetzner Online GmbH (Germany)

Observed indicators

mail.bookingcars.ru
167.235.74.173
https://mail.bookingcars.ru/
https://mail.bookingcars.ru/skins/elastic/images/favicon.ico?s=1716125236
https://mail.bookingcars.ru/skins/elastic/deps/bootstrap.min.css?s=1716125244
https://mail.bookingcars.ru/skins/elastic/styles/styles.min.css?s=1716125236
https://mail.bookingcars.ru/plugins/jqueryui/themes/elastic/jquery-ui.min.css?s=1716125236
https://mail.bookingcars.ru/program/js/jquery.min.js?s=1716125242
https://mail.bookingcars.ru/program/js/common.min.js?s=1716125236
https://mail.bookingcars.ru/program/js/app.min.js?s=1716125236
https://mail.bookingcars.ru/program/js/jstz.min.js?s=1716125242
https://mail.bookingcars.ru/plugins/jqueryui/js/jquery-ui.min.js?s=1716125236
https://mail.bookingcars.ru/skins/elastic/images/logo.svg?s=1716125236
https://mail.bookingcars.ru/?_task=login
https://mail.bookingcars.ru/skins/elastic/deps/bootstrap.bundle.min.js?s=1716125244
https://mail.bookingcars.ru/skins/elastic/ui.min.js?s=1716125236

Questions about mail.bookingcars.ru

Is mail.bookingcars.ru safe?: The scan of mail.bookingcars.ru on 21 Aug 2026 reached no verdict either way (score 14). Too little was captured to judge it, which is an unknown rather than a pass.
How was mail.bookingcars.ru checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of mail.bookingcars.ru

Scanned on MalwareAnalyzer by Cyble · Open interactive scan