vipavtoufa.ru - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned vipavtoufa.ru and returned a unknown verdict (score 6). The page resolved to 87.236.16.12 on Beget Ltd in RU. 3 domains and 1 IP were contacted, over 1 HTTP request. 9 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 6) · Confidence 9%
- Scanned URL:
http://vipavtoufa.ru/wp-content/plugins/super-forms/uploads/php/files/ef48f62d362a3b6e35d626e56ae93e3c/najagod.pdf - Domain: vipavtoufa.ru · IP: 87.236.16.12 · AS198610 · RU
- Server: nginx-reuseport/1.21.1
- Page title: Страница не найдена — Вип авто Уфа
- HTTP status: 404 · text/html; charset=UTF-8
- HTTP requests captured: 1
- Scan tier: fast · observed 2026-08-21 00:51:29 UTC
Malware communicating with this URL (9)
These samples were observed contacting or being served from vipavtoufa.ru. Each links to its full analysis.
- Phishing - referenced ·
98fd99e7fb920c5e4c1f9efe454cfc07· first seen 2026-08-21 - Phishing - referenced ·
db813e9a8f4bfd37b977f1600e19bdd4· first seen 2026-08-19 - Phishing - referenced ·
eb4c38ab8503ce4db3e0762d07613db0· first seen 2026-08-16 - Phishing - referenced ·
c20172fbdb26c1d241999aea9d5a3b0a· first seen 2026-08-16 - Phishing - referenced ·
7ff29edbf6f7d1ce017711a89f650f60· first seen 2026-08-15 - Phishing - referenced ·
166a6283ce027c1f076e4058d556a4b4· first seen 2026-08-13 - Phishing - referenced ·
d71e27ed7fb3e045063f0287be5034e9· first seen 2026-08-13 - Phishing - referenced ·
20cf1b9f71346eeb2bc6984a247d2861· first seen 2026-08-13 - Phishing - referenced ·
61db1aed549dcebaded76d4e02a135e9· first seen 2026-08-13
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Served over plaintext HTTP
Detected technologies
- Nginx
- PHP
- WordPress
Contacted infrastructure
- 87.236.16.12 - AS198610 Beget Ltd (Russian Federation)
Observed indicators
- vipavtoufa.ru
- mc.yandex.ru
- ru.wordpress.org
- 87.236.16.12
- http://vipavtoufa.ru/wp-content/plugins/super-forms/uploads/php/files/ef48f62d362a3b6e35d626e56ae93e3c/najagod.pdf
- http://vipavtoufa.ru/wp-content/themes/twentytwentytwo/style.css?ver=1.3
- https://vipavtoufa.ru/wp-json/
- https://vipavtoufa.ru/xmlrpc.php?rsd
- https://mc.yandex.ru/watch/51304129
- http://vipavtoufa.ru/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1
- https://vipavtoufa.ru/wp-content/uploads/2023/01/logotaxi_1-150x150.png
- https://vipavtoufa.ru/wp-content/uploads/2023/01/logotaxi_1-300x300.png
- https://vipavtoufa.ru/
- https://vipavtoufa.ru/wp-content/uploads/2023/01/logotaxi_1.png
- https://vipavtoufa.ru/bus/
- https://vipavtoufa.ru/otziv/
- https://vipavtoufa.ru/%d1%81%d0%bf%d0%b0%d1%81%d0%b8%d0%b1%d0%be-%d0%b7%d0%b0-%d0%b7%d0%b0%d1%8f%d0%b2%d0%ba%d1%83/
- https://ru.wordpress.org/
- http://vipavtoufa.ru/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb
Other scans of vipavtoufa.ru (2)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 22 Aug 2026 - unknown ·
http://vipavtoufa.ru/wp-content/plugins/super-forms/uploads/php/files/7bdd30c8c31920f724c8e06e57b457 - 13 Aug 2026 - unknown ·
http://vipavtoufa.ru/wp-content/plugins/super-forms/uploads/php/files/295a6125ef6bfafd68099728ac82c2
Questions about vipavtoufa.ru
- Is vipavtoufa.ru safe?
- The scan of vipavtoufa.ru on 21 Aug 2026 reached no verdict either way (score 6). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with vipavtoufa.ru?
- 9 analysed samples communicate with this URL, including Phishing.
- How was vipavtoufa.ru checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of vipavtoufa.ru
Scanned on MalwareAnalyzer by Cyble · Open interactive scan