xajibur.ru - URL scan, 19 Aug 2026
MalwareAnalyzer by Cyble scanned xajibur.ru and returned a unknown verdict (score 0). The page resolved to 103.224.182.253 on Trellian Pty. Limited in US. 1 domain and 1 IP were contacted, over 1 HTTP request. 27 malware samples communicate with this URL (Phishing). This is a point-in-time observation from 19 Aug 2026; the page may have changed since.
Scan result
- Verdict: unknown (score 0) · Confidence 0%
- Scanned URL:
https://xajibur.ru/123?utm_term=allen+bradley+powerflex+4+manual+pdf+espa%25C3%25B1ol - Domain: xajibur.ru · IP: 103.224.182.253 · AS133618 · US
- Server: Apache
- Page title: xajibur.ru
- HTTP status: 200 · text/html; charset=UTF-8
- HTTP requests captured: 1
- Scan tier: fast · observed 2026-08-19 15:34:33 UTC
Malware communicating with this URL (27)
These samples were observed contacting or being served from xajibur.ru. Each links to its full analysis.
- Phishing - referenced ·
0ed7d046fece3098dbc1001b88d376c1· first seen 2026-08-19 - Phishing - referenced ·
4ddcea7590115cc3971a18fda51ae77e· first seen 2026-08-16 - Phishing - referenced ·
8f9b054c5a413e19bf31127b36c3a7d7· first seen 2026-08-16 - Phishing - referenced ·
2e295ccbad9ddf741ab36b6ded8b62c9· first seen 2026-08-16 - Phishing - referenced ·
e8e7159a25a24db7810709a17e5935ae· first seen 2026-08-16 - Phishing - referenced ·
2bb3f5065b589a45ae8da5a3ed65ae06· first seen 2026-08-16 - Phishing - referenced ·
4e076651c2c0d976a2395830a2f5f6d0· first seen 2026-08-16 - Phishing - referenced ·
61aafd0e6712469ff85b6e0df1108082· first seen 2026-08-15 - Phishing - referenced ·
580654268ac08cf2f6fbc82bf374508c· first seen 2026-08-15 - Phishing - referenced ·
587e97f0a28f81c41cade368b8106b0c· first seen 2026-08-15 - Phishing - referenced ·
981a3c990e7d3ed9583ad1e2b10d1f4c· first seen 2026-08-15 - Phishing - referenced ·
70edb170852f06d24c5effbcf3826df2· first seen 2026-08-15 - Phishing - referenced ·
bc50469940d9b36772251a07804a4e83· first seen 2026-08-14 - Phishing - referenced ·
5af4a71928667c8693c40491c0631e0a· first seen 2026-08-14 - Phishing - referenced ·
5c37af7b3ce25ebc4dce2066ddec7b75· first seen 2026-08-14
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Detected technologies
- Apache
Contacted infrastructure
- 103.224.182.253 - AS133618 Trellian Pty. Limited (United States)
Observed indicators
- xajibur.ru
- 103.224.182.253
- https://xajibur.ru/123?utm_term=allen+bradley+powerflex+4+manual+pdf+espa%25C3%25B1ol
- https://xajibur.ru/js/fingerprint/iife.min.js
- http://xajibur.ru/123?utm_term=allen+bradley+powerflex+4+manual+pdf+espa%25C3%25B1ol&tr_uuid=20260820-0134-3416-9292-1281adcb88db&fp=-3
Other scans of xajibur.ru (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 24 Aug 2026 - unknown ·
https://xajibur.ru/strik?utm_term=how+to+use+a+portable+air+conditioner+with+a+crank+window - 23 Aug 2026 - unknown ·
https://xajibur.ru/strik?utm_term=yamaha+ypg-535+review - 23 Aug 2026 - unknown ·
https://xajibur.ru/strik?utm_term=how+can+i+send+a+video+from+facebook+to+whatsapp+status - 23 Aug 2026 - unknown ·
https://xajibur.ru/strik?utm_term=yamaha+ypg-535+review - 23 Aug 2026 - unknown ·
https://xajibur.ru/strik?utm_term=how+to+repair+cignal+remote+control - 23 Aug 2026 - unknown ·
https://xajibur.ru/strik?utm_term=adobe+suite+student+price+uk - 22 Aug 2026 - unknown ·
https://xajibur.ru/strik?utm_term=where+is+air+force+academy+located - 22 Aug 2026 - unknown ·
https://xajibur.ru/strik?utm_term=what+happens+if+you+stop+praying+to+la+santa+muerte - 21 Aug 2026 - unknown ·
https://xajibur.ru/123?utm_term=bipap+mode+pdf - 21 Aug 2026 - unknown ·
https://xajibur.ru/123?utm_term=bipap+mode+pdf
Questions about xajibur.ru
- Is xajibur.ru safe?
- The scan of xajibur.ru on 19 Aug 2026 reached no verdict either way (score 0). Too little was captured to judge it, which is an unknown rather than a pass.
- What malware is associated with xajibur.ru?
- 27 analysed samples communicate with this URL, including Phishing.
- How was xajibur.ru checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the fast tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the fast tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of xajibur.ru
Scanned on MalwareAnalyzer by Cyble · Open interactive scan