www.liveinternet.ru - URL scan, 20 Aug 2026
MalwareAnalyzer by Cyble scanned www.liveinternet.ru and returned a unknown verdict (score 18), categorised as credential-harvest. The page resolved to 88.212.202.50 on EDINAYA SET LIMITED LIABILITY COMPANY in RU. 17 domains and 1 IP were contacted, over 13 HTTP requests. 18 malware samples communicate with this URL (Coinminer). The request followed 1 redirect before landing. This is a point-in-time observation from 20 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 18) · Confidence 21%
- Scanned URL:
http://www.liveinternet.ru/click - Domain: www.liveinternet.ru · IP: 88.212.202.50 · AS39134 · RU
- Server: nginx/1.14.2
- Page title: LiveInternet @ Статистика и дневники, почта и поиск
- HTTP status: 200 · text/html; charset=utf-8
- TLS issuer: C=US, O=Let's Encrypt, CN=YE1 · valid to Nov 11 01: · subject CN=*.liveinternet.ru
- HTTP requests captured: 13
- Scan tier: fast · observed 2026-08-20 10:12:22 UTC
Redirect chain
http://www.liveinternet.ru/clickhttps://www.liveinternet.ru/
Malware communicating with this URL (18)
These samples were observed contacting or being served from www.liveinternet.ru. Each links to its full analysis.
- bd56c2c997dd61654f7b9979848f26b956291b435f927bba4c94cb3207605286 - referenced ·
bd56c2c997dd61654f7b9979848f26b9· first seen 2026-08-20 - 9905ac8e42c9f460b9ddb487205735e58f9ba959239c11cebbe52f75e1f26102 - referenced ·
9905ac8e42c9f460b9ddb487205735e5· first seen 2026-08-20 - Coinminer - referenced ·
257d36184d5745398fb026d060de4531· first seen 2026-08-19 - 6adfecbbfe26c19e68d5106b87acbb7e44db3132fed0956fe50f7520c8f97efa - referenced ·
6adfecbbfe26c19e68d5106b87acbb7e· first seen 2026-08-17 - 6ad8f9ffae51775c4046d5b7292619facb382c9c40e03e2e45d4ffe3f7d6f592 - referenced ·
6ad8f9ffae51775c4046d5b7292619fa· first seen 2026-08-17 - 11b95751d5b8420221b0f0ae1b456cd43b8db135a22338793ca23679388b73c7 - referenced ·
11b95751d5b8420221b0f0ae1b456cd4· first seen 2026-08-17 - 11bc0bd9cb8e777b55b92b4460847e070eae3076ec547bbacc305e2d40d27f1e - referenced ·
11bc0bd9cb8e777b55b92b4460847e07· first seen 2026-08-17 - 11bb83c6b72532e97ca84ffcd11900921d9d48f37afe7081e2878077a48e4c4d - referenced ·
11bb83c6b72532e97ca84ffcd1190092· first seen 2026-08-16 - 11b3d9f610f6fec8dfa3f884a8d7f888abcb22929609846ac0059fdaec548e2c - referenced ·
11b3d9f610f6fec8dfa3f884a8d7f888· first seen 2026-08-16 - 11bc9063ec277612d9d445347f86a3add0f432e5494b2842b6178eff16d73ee3 - referenced ·
11bc9063ec277612d9d445347f86a3ad· first seen 2026-08-16 - 408dda27d76e7e94028a012e035dcdc88cdd3541c0e376552beb2cc4ff399470 - referenced ·
408dda27d76e7e94028a012e035dcdc8· first seen 2026-08-16 - f55320fc737465bbe0af20451106c245ecc12b4aa757954df114b1f63286e030 - referenced ·
f55320fc737465bbe0af20451106c245· first seen 2026-08-15 - f55d0f6e940d09b92ea0d24be1ad8d28ed81c7ec2021bf3f46ecd316220de0f5 - referenced ·
f55d0f6e940d09b92ea0d24be1ad8d28· first seen 2026-08-15 - 5028ea147dc460ab566ae4ee6cfcee4f90eca4981466f95f017570c8defdbe02 - referenced ·
5028ea147dc460ab566ae4ee6cfcee4f· first seen 2026-08-14 - 5021229a80bc2bd70bb386d994a4804e429c63dc738c3e19baeb9ab98f436ca7 - referenced ·
5021229a80bc2bd70bb386d994a4804e· first seen 2026-08-14
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Categories
- credential-harvest
Why this verdict
- Credential-harvesting form
Detected technologies
- Nginx
Contacted infrastructure
- 88.212.202.50 - AS39134 EDINAYA SET LIMITED LIABILITY COMPANY (Russian Federation)
Observed indicators
- www.liveinternet.ru
- pagead2.googlesyndication.com
- i.li.ru
- yandex.ru
- content.adriver.ru
- g.liveinternet.ru
- counter.yadro.ru
- cdn.viqeo.tv
- widget.adplay.ru
- mediametrics.ru
- smart-lab.ru
- www.03.ru
- www.3dnews.ru
- radio.mediametrics.ru
- doctor.ru
- mc.yandex.ru
- www.li.ru
- 88.212.202.50
- https://www.liveinternet.ru/
- https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Other scans of www.liveinternet.ru (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown ·
https://stories-of-success.ru/ - 23 Aug 2026 - unknown ·
https://boilerservis.ru/uploads/files/timunilixive.pdf - 22 Aug 2026 - unknown ·
http://josefinacomparte.blogspot.com/search - 22 Aug 2026 - unknown ·
http://josefinacomparte.blogspot.com/ - 22 Aug 2026 - unknown ·
https://ssyssyss.narod.ru/ - 22 Aug 2026 - unknown
- 22 Aug 2026 - unknown ·
https://kinohorror.com/upload/file/tonabebeb.pdf - 22 Aug 2026 - unknown ·
https://kinohorror.com/upload/file/tonabebeb.pdf - 22 Aug 2026 - suspicious ·
https://www.semagro-msw.ru/pics/images/file/77012984907.pdf - 22 Aug 2026 - suspicious ·
https://www.semagro-msw.ru/pics/images/file/77012984907.pdf
Questions about www.liveinternet.ru
- Is www.liveinternet.ru safe?
- The scan of www.liveinternet.ru on 20 Aug 2026 reached no verdict either way (score 18). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with www.liveinternet.ru?
- 18 analysed samples communicate with this URL, including Coinminer.
- How was www.liveinternet.ru checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of www.liveinternet.ru
Scanned on MalwareAnalyzer by Cyble · Open interactive scan