torbay.ru - URL scan, 15 Aug 2026

MalwareAnalyzer by Cyble scanned torbay.ru and returned a unknown verdict (score -6). The page resolved to 172.67.149.220. 7 domains and 2 IPs were contacted, over 12 HTTP requests. 2 malware samples communicate with this URL (Phishing). The request followed 3 redirects before landing. This is a point-in-time observation from 15 Aug 2026; the page may have changed since.

Scan result

• Verdict: unknown (score -6) · Confidence 12%
• Scanned URL: http://norilsk.torbay.ru/images/uploads/file/82852705374.pdf
• Domain: torbay.ru · IP: 172.67.149.220
• Server: cloudflare
• Page title: Vodka Casino - официальный сайт, бонус 100% к депозиту, вход в Водка Казино
• HTTP status: 200 · text/html; charset=UTF-8
• TLS issuer: C=US, O=Google Trust Services, CN=WE1 · valid to Sep 29 02: · subject CN=torbay.ru
• HTTP requests captured: 12
• Scan tier: standard · observed 2026-08-15 15:57:47 UTC

Redirect chain

1. http://norilsk.torbay.ru/images/uploads/file/82852705374.pdf
2. https://norilsk.torbay.ru/images/uploads/file/82852705374.pdf
3. https://torbay.ru/images/uploads/file/82852705374.pdf
4. https://torbay.ru/

Malware communicating with this URL (2)

These samples were observed contacting or being served from torbay.ru. Each links to its full analysis.

• Phishing - referenced · 6dbf475ace709dc06dd3420d51d9403a · first seen 2026-08-13
• Phishing - referenced · d1d3c408f99d504cced24376210fbc8e · first seen 2026-08-11

Antivirus & YARA (0 of 44 engines)

No engine flagged this page's content.

Why this verdict

• Valid TLS, no impersonation or off-origin credential post
• Cross-host redirect chain

Detected technologies

• Cloudflare
• WordPress
• jQuery
• Bootstrap
• Cloudflare Insights

Contacted infrastructure

• 172.67.149.220 - AS13335 Cloudflare, Inc. (United States)

Observed indicators

• torbay.ru
• cdn.jsdelivr.net
• unpkg.com
• amp-vodka-mobile1.ru
• mc.yandex.ru
• ajax.googleapis.com
• static.cloudflareinsights.com
• 172.67.149.220
• 104.21.29.227
• https://torbay.ru/
• https://torbay.ru/wp-content/themes/Vodka/favicon.png
• https://torbay.ru/ru-ru/
• https://cdn.jsdelivr.net/
• https://unpkg.com/
• https://torbay.ru/wp-content/plugins/add-notice-coockie/public/css/add-notice-coockie-public.css?ver=1.0.0
• https://torbay.ru/wp-content/plugins/gen-content/public/css/gen-content-public.css?ver=1.0.0
• https://cdn.jsdelivr.net/npm/bootstrap@5.0.2/dist/css/bootstrap.min.css
• https://unpkg.com/swiper@8/swiper-bundle.min.css
• https://torbay.ru/wp-content/themes/Vodka/assets/css/main.css
• https://torbay.ru/wp-content/themes/Vodka/assets/css/media.css

Other scans of torbay.ru (2)

This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.

• 20 Aug 2026 - unknown
• 20 Aug 2026 - unknown

Questions about torbay.ru

Is torbay.ru safe?

The scan of torbay.ru on 15 Aug 2026 reached no verdict either way (score -6). Too little was captured to judge it, which is an unknown rather than a pass.

What malware is associated with torbay.ru?

2 analysed samples communicate with this URL, including Phishing.

How was torbay.ru checked?

A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.

Scanned at the standard tier - see how URL scanning works.

Scan another URL · Latest analyzed threats · All scans of torbay.ru

Scanned on MalwareAnalyzer by Cyble · Open interactive scan