The scan of rsti.biz on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with rsti.biz?

3 analysed samples communicate with this URL, including Phishing.

How was rsti.biz checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

rsti.biz - URL scan, 21 Aug 2026

MalwareAnalyzer by Cyble scanned rsti.biz and returned a unknown verdict (score 6). The page resolved to 194.85.61.76 on JSC "RU-CENTER" in RU. The domain was registered 690 days ago through Regional Network Information Center, JSC dba RU-CENTER. 1 domain and 1 IP were contacted. 3 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 9%
Scanned URL: http://rsti.biz/files/fck/file/pukedoxegikefakup.pdf
Domain: rsti.biz · IP: 194.85.61.76 · AS48287 · RU
Server: nginx
Page title: 404 Not Found
HTTP status: 404 · text/html
Registrar: Regional Network Information Center, JSC dba RU-CENTER · domain age 690 days · created 2024-09-30
Registrant country: RU
Scan tier: fast · observed 2026-08-21 18:26:33 UTC

Malware communicating with this URL (3)

These samples were observed contacting or being served from rsti.biz. Each links to its full analysis.

Phishing - referenced · aa3861e6a3caf08405b367b9b846187f · first seen 2026-08-15
Phishing - referenced · 86882855a5e68a228a04f739fd9352ee · first seen 2026-08-14
Phishing - referenced · 4b6237a52a6947fdb668b2a157dc701c · first seen 2026-08-11

Antivirus & YARA (0 of 47 engines)

No engine flagged this page's content.

Why this verdict

Served over plaintext HTTP

Detected technologies

Nginx

Contacted infrastructure

194.85.61.76 - AS48287 JSC "RU-CENTER" (Russian Federation)

Observed indicators

rsti.biz
194.85.61.76
http://rsti.biz/files/fck/file/pukedoxegikefakup.pdf

Other scans of rsti.biz (1)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

15 Aug 2026 - unknown · http://rsti.biz/files/fck/file/gebiwofogaxenaxeduxuto.pdf

Questions about rsti.biz

Is rsti.biz safe?: The scan of rsti.biz on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with rsti.biz?: 3 analysed samples communicate with this URL, including Phishing.
How was rsti.biz checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of rsti.biz

Scanned on MalwareAnalyzer by Cyble · Open interactive scan