russian-ice-spb.ru - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned russian-ice-spb.ru and returned a unknown verdict (score 16), categorised as credential-harvest. The page resolved to 5.23.50.121 on TimeWeb Ltd. in RU. 6 domains and 1 IP were contacted, over 4 HTTP requests. 16 malware samples communicate with this URL (Phishing, Phish). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 16) · Confidence 22%
- Scanned URL:
http://russian-ice-spb.ru/sites/default/files/webform/files/40307308503.pdf - Domain: russian-ice-spb.ru · IP: 5.23.50.121 · AS9123 · RU
- Server: nginx/1.30.4
- Page title: Страница не найдена | Русский Лед
- HTTP status: 404 · text/html; charset=utf-8
- HTTP requests captured: 4
- Scan tier: standard · observed 2026-08-19 15:18:12 UTC
Malware communicating with this URL (16)
These samples were observed contacting or being served from russian-ice-spb.ru. Each links to its full analysis.
- Phishing - referenced ·
e82c8b5d0f81450c99377228ff604234· first seen 2026-08-17 - Phishing - referenced ·
b3b61e320ae1587278f78ec18fbdbc82· first seen 2026-08-16 - Phishing - referenced ·
0c4d9f638a574f2cbd2b917fd0fcb9da· first seen 2026-08-16 - Phishing - referenced ·
9ea6cdfd12fd5686460f47326ea9e3e8· first seen 2026-08-16 - Phishing - referenced ·
d7d125a3e0db55d25d2d0f8d89701358· first seen 2026-08-15 - Phishing - referenced ·
87340d49f619c97f156bdece34729cbf· first seen 2026-08-15 - Phish - referenced ·
fccf821236e20e31c4f32b785f7902f4· first seen 2026-08-15 - Phishing - referenced ·
06799d819b6ad0929690918853792830· first seen 2026-08-14 - Phishing - referenced ·
6e1639aeb858a177b193aa02ee1cf9c3· first seen 2026-08-14 - Phishing - referenced ·
02aa222d72c93e42354067141d5555e8· first seen 2026-08-13 - Phishing - referenced ·
3bff2113039429f8b3852742ab52606e· first seen 2026-08-14 - Phishing - referenced ·
5420d8c3cf4c2f284d15b1a4c79fdc1e· first seen 2026-08-14 - Phishing - referenced ·
70b15535ce361a1830db03f5f1566c7a· first seen 2026-08-13 - Phishing - referenced ·
9462cb989f2d9b350f73484e8eda9eed· first seen 2026-08-13 - Phishing - referenced ·
473a5bc0e913e661b6607f9a8db750d6· first seen 2026-08-13
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Categories
- credential-harvest
Why this verdict
- Credential-harvesting form
- Served over plaintext HTTP
Detected technologies
- Nginx
- Drupal
- jQuery
Contacted infrastructure
- 5.23.50.121 - AS9123 TimeWeb Ltd. (Russian Federation)
Observed indicators
- russian-ice-spb.ru
- fonts.googleapis.com
- www.facebook.com
- vk.com
- instagram.com
- msys.pro
- 5.23.50.121
- http://russian-ice-spb.ru/sites/default/files/webform/files/40307308503.pdf
- http://russian-ice-spb.ru/sites/default/files/favicon.ico
- http://russian-ice-spb.ru/
- http://russian-ice-spb.ru/sites/default/files/css/css_xE-rWrJf-fncB6ztZfd2huxqgxu4WO-qwma6Xer30m4.css
- http://russian-ice-spb.ru/sites/default/files/css/css_T-WhNBk3DlOLJaz--ynweF48OQ_2AvyHg3F_9MIpVes.css
- http://russian-ice-spb.ru/sites/default/files/css/css_gTfq2ZvdXZPX4obBBqkS2pSpRClHsD6V5288Zuu_tKk.css
- http://russian-ice-spb.ru/sites/default/files/js/js_oTw2mccdSyi5Mu_UeNjwZZ2nsxd4cA8KM0jkogZEw68.js
- http://russian-ice-spb.ru/sites/default/files/js/js_totPPoB49jzV9L8rXSFJC9psIlOCaXXphXVq4rkvY1o.js
- http://russian-ice-spb.ru/sites/default/files/js/js_nFoIVbXKqLGhoMUj08ThUBR05m81nJmO8_Gd9y3TX7I.js
- http://russian-ice-spb.ru/css/main.css?372
- http://russian-ice-spb.ru/css/responsive.css?818
- http://russian-ice-spb.ru/css/cke.css
- http://russian-ice-spb.ru/css/slick.css
Other scans of russian-ice-spb.ru (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 19 Aug 2026 - unknown
- 17 Aug 2026 - unknown ·
http://russian-ice-spb.ru/sites/default/files/webform/files/97818084314.pdf - 16 Aug 2026 - unknown ·
http://russian-ice-spb.ru/sites/default/files/webform/files/fapulewamekunasu.pdf - 16 Aug 2026 - unknown ·
http://russian-ice-spb.ru/sites/default/files/webform/files/fapulewamekunasu.pdf - 16 Aug 2026 - unknown ·
http://russian-ice-spb.ru/sites/default/files/webform/files/77599308563.pdf - 16 Aug 2026 - unknown ·
http://russian-ice-spb.ru/sites/default/files/webform/files/77599308563.pdf - 15 Aug 2026 - unknown ·
http://russian-ice-spb.ru/sites/default/files/webform/files/32020734574.pdf - 15 Aug 2026 - unknown ·
http://russian-ice-spb.ru/sites/default/files/webform/files/32020734574.pdf - 15 Aug 2026 - unknown
- 14 Aug 2026 - unknown ·
http://russian-ice-spb.ru/sites/default/files/webform/files/loxigexaxezirizedud.pdf
Questions about russian-ice-spb.ru
- Is russian-ice-spb.ru safe?
- The scan of russian-ice-spb.ru on 19 Aug 2026 reached no verdict either way (score 16). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with russian-ice-spb.ru?
- 16 analysed samples communicate with this URL, including Phishing, Phish.
- How was russian-ice-spb.ru checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of russian-ice-spb.ru
Scanned on MalwareAnalyzer by Cyble · Open interactive scan