ScanMalware.com

Security Scan Report: citysakh.ru

Site favicon
Submitted: Oct 6, 2026, 4:12:46 AMCompleted: Oct 6, 2026, 4:14:53 AMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 78%

2
Risk Score

Self-branded Sakhalin news portal with no forms, no impersonation and no threat-intel, YARA or IDS hits; only a long cross-domain redirect chain, which is a minor hygiene concern.

Risk Factors (2)
Unusually long cross-domain redirect chain (14 hops) — a minor transparency/hygiene concern, not evidence of phishing
Domain is not in the Cisco Umbrella top 1M and only ~229 days old, but this is a weak prior, not malicious evidence
Safety Factors (4)
Self-branding matches the domain; no impersonation of another entity
No forms, no credential or payment capture anywhere on the page
No threat-intelligence matches, no JavaScript malware, no IDS alerts
Content reads as ordinary local news and community listings (news headlines, photo reports, local business catalog)
Domain age information unavailable

Details

Page Title

Citysakh.ru - Сахалинский информационно-развлекательный портал.

Scan Type

public

Domain Name Analysis

Domain 'citysakh.ru' uses the Russian country-code top-level domain (.ru) with no subdomain. Its registrable label 'citysakh' stretches across 8 characters split between 2 vowels and 6 consonants. Tokenizing the label suggests 4 words: city, s, a, kh. Expect 1.5 characters per word on average. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://citysakh.ru

Page Load Overview

90.14s
Total Load Time
32.7 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:63%
Script:Cyrillic
Direction:ltr

Detection Details

Text Length:6,274 chars
Detector Agreement:80%

Website Classification

Primary Category

government public service75% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

government public service
75%
entertainment media
60%
healthcare medical
47%
news media journalism
41%
adult content
35%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
2191.142.84.38St Petersburg, St.-Petersburg, Russia
AS41722Miran Ltd.
8142.251.155.119Google · CDNUnited States
AS15169Google LLC
813.248.169.48Aws · CLOUDUnited States
AS16509Amazon.com, Inc.
8142.251.127.94Google · CDNUnited States
AS15169Google LLC
8109.238.90.239Russia
AS201706Servicepipe LLC
892.53.96.169St Petersburg, St.-Petersburg, Russia
AS9123Jsc timeweb
887.240.132.72Russia
AS47541LLC VK
8217.20.155.208Russia
AS47764LLC VK
8142.251.156.119Google · CDNUnited States
AS15169Google LLC
8178.248.233.148Russia
AS51115HLL LLC
45355--

Detected Technologies6

WordPress
75%
Vue.js
50%
Node.js
50%
HSTS
40%
VK Pixel
20%
Nuxt.js
20%

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1A7E45A324330327DB00A8D49D9603F8D757A907BFEA356D9F7691F16A7C2DC90A21B89

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

6144:4HRxGcfi5oCXjxQeyF9iFvukLfMp4pmKwFTF/YlA:4HRRyQjF9iFsp4pmKwFTF/YlA

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:660032:sIIT3YhpxSYQRUBJRNcApCAcBIbFwItIRDKLAWDIAwCigqiMSgGQ8gkE0QQECBIhiRBXACIHwEABr7sR0YJPIYKAsghkSUBN

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:9f879f1f7f417f38
Perceptual Hash:9e9f4be1c1807ac5
Difference Hash:38353437cf8f8ff1
Wavelet Hash:9f801f1f7f414718
Color Hash:#2d8649

Other Hashes

Crop Resistant:38353437cf8f8ff1,cb8b0ded7991c5a1,0000004040000000,1be4d492e4de2142,9737e4f4e4e47071

Scan History

Scan history not available

Unable to load historical scan data