Is semashko.nnov.ru safe?

The scan of semashko.nnov.ru on 23 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with semashko.nnov.ru?

1 analysed samples communicate with this URL, including Sagent.

How was semashko.nnov.ru checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

semashko.nnov.ru - URL scan, 23 Aug 2026

MalwareAnalyzer by Cyble scanned semashko.nnov.ru and returned a unknown verdict (score 6), categorised as credential-harvest. The page resolved to 158.160.49.189 on YandexCloud - Yandex.Cloud LLC, RU in RU. 28 domains and 1 IP were contacted, over 6 HTTP requests. 1 malware sample communicates with this URL (Sagent). This is a point-in-time observation from 23 Aug 2026; the page may have changed since.

Scan result

Verdict: unknown (score 6) · Confidence 12%
Scanned URL: https://semashko.nnov.ru/
Domain: semashko.nnov.ru · IP: 158.160.49.189 · AS200350 · RU
Server: nginx
Page title: ГБУЗ Нижегородская областная клиническая больница имени Н.А. Семашко
HTTP status: 200 · text/html; charset=utf-8
TLS issuer: C=US, O=Let's Encrypt, CN=YE1 · valid to Oct 5 05: · subject CN=semashko.nnov.ru
HTTP requests captured: 6
Scan tier: fast · observed 2026-08-23 10:37:27 UTC

Malware communicating with this URL (1)

These samples were observed contacting or being served from semashko.nnov.ru. Each links to its full analysis.

Sagent - contacted · b6c6f71b45f3e445bff9f109e6a23fb9 · first seen 2026-08-23

Antivirus & YARA (0 of 48 engines)

No engine flagged this page's content.

Why this verdict

Credential-harvesting form
Valid TLS, no impersonation or off-origin credential post

Detected technologies

Nginx
PHP

Contacted infrastructure

158.160.49.189 - AS200350 YandexCloud - Yandex.Cloud LLC, RU (RU)

Observed indicators

semashko.nnov.ru
lidrekon.ru
vk.com
ok.ru
max.ru
pos.gosuslugi.ru
zdrav-nnov.ru
anketa.minzdrav.gov.ru
bus.gov.ru
gu.nnov.ru
pds.napf.ru
government.ru
www.takzdorovo.ru
pfo.gov.ru
tfoms52.ru
nobl.ru
www.gosuslugi.ru
may9.ru
xn--80afoscdgbnpido8j.xn--p1ai
ropniz.ru

Questions about semashko.nnov.ru

Is semashko.nnov.ru safe?: The scan of semashko.nnov.ru on 23 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
What malware is associated with semashko.nnov.ru?: 1 analysed samples communicate with this URL, including Sagent.
How was semashko.nnov.ru checked?: A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the fast tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of semashko.nnov.ru

Scanned on MalwareAnalyzer by Cyble · Open interactive scan