school15-tyumen.ru - URL scan, 13 Aug 2026
MalwareAnalyzer by Cyble scanned school15-tyumen.ru and returned a unknown verdict (score 0). The page resolved to 185.114.247.102 on TimeWeb-AS - JSC _TIMEWEB_, RU in RU. 6 domains and 1 IP were contacted, over 11 HTTP requests. 3 malware samples communicate with this URL (Phishing). The request followed 1 redirect before landing. This is a point-in-time observation from 13 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 0%
- Scanned URL:
http://school15-tyumen.ru/f/zonofegusopepu.pdf - Domain: school15-tyumen.ru · IP: 185.114.247.102 · AS9123 · RU
- Server: nginx/1.30.4
- Page title: Страница не найдена – МАОУ СОШ № 15
- HTTP status: 404 · text/html; charset=UTF-8
- HTTP requests captured: 11
- Scan tier: fast · observed 2026-08-13 21:18:23 UTC
Redirect chain
http://school15-tyumen.ru/f/zonofegusopepu.pdfhttps://school15-tyumen.ru/f/zonofegusopepu.pdf
Malware communicating with this URL (3)
These samples were observed contacting or being served from school15-tyumen.ru. Each links to its full analysis.
- Phishing - referenced ·
8cf50d250b22834a54dcbeecf5aca74b· first seen 2026-08-13 - Phishing - referenced ·
6d0513f4adcd6662b656f94fead4244e· first seen 2026-08-13 - Phishing - referenced ·
ea0046f60d229ded647e1cb7378f9ed5· first seen 2026-08-11
Antivirus & YARA (0 of 44 engines)
No engine flagged this page's content.
Detected technologies
- Nginx
- WordPress
- jQuery
- Bootstrap
Contacted infrastructure
- 185.114.247.102 - AS9123 TimeWeb-AS - JSC _TIMEWEB_, RU (RU)
Observed indicators
- school15-tyumen.ru
- gmpg.org
- fonts.googleapis.com
- metrika.yandex.ru
- informer.yandex.ru
- mc.yandex.ru
- 185.114.247.102
- https://school15-tyumen.ru/f/zonofegusopepu.pdf
- http://gmpg.org/xfn/11
- https://school15-tyumen.ru/xmlrpc.php
- https://school15-tyumen.ru/wp-content/cache/autoptimize/css/autoptimize_7aaf289b0decb3ed01bab38604f4eb3b.css
- https://fonts.googleapis.com/
- https://fonts.googleapis.com/css2?family=Inter:wght@300;400;600;700&display=swap
- https://school15-tyumen.ru/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
- https://school15-tyumen.ru/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
- https://school15-tyumen.ru/wp-content/cache/autoptimize/js/autoptimize_single_ec909a79210e7de958e32d9bcd280ce9.js?ver=1774929648
- https://school15-tyumen.ru/wp-json/
- https://school15-tyumen.ru/wp-content/uploads/2025/01/cropped-logo_sq-32x32.png
- https://school15-tyumen.ru/wp-content/uploads/2025/01/cropped-logo_sq-192x192.png
- https://school15-tyumen.ru/wp-content/uploads/2025/01/cropped-logo_sq-180x180.png
Other scans of school15-tyumen.ru (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 22 Aug 2026 - unknown ·
https://school15-tyumen.ru/f/68486311614.pdf - 13 Aug 2026 - unknown
Questions about school15-tyumen.ru
- Is school15-tyumen.ru safe?
- The scan of school15-tyumen.ru on 13 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with school15-tyumen.ru?
- 3 analysed samples communicate with this URL, including Phishing.
- How was school15-tyumen.ru checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of school15-tyumen.ru
Scanned on MalwareAnalyzer by Cyble · Open interactive scan