Security Scan Report: tomesto.ru

Site favicon
Submitted: Sep 21, 2026, 10:52:49 AMCompleted: Sep 21, 2026, 10:53:09 AMpubliccompleted

This website contacted 4 IPs in 2 countries across 4 domains to perform 27 HTTP transactions. The main domain is tomesto.ru and was registered 15 years ago.

Submitted URL: https://tomesto.ru

The Cisco Umbrella rank of the primary domain is #927,757 of the top 1 million websites

AI Security Verdict

Safe Website

Confidence: 88%

1
Risk Score

Established 2012 Russian restaurant-booking site (ТоМесто) with self-branded content, no forms, and no Indicators of Compromise, YARA, or IDS hits. Legitimate.

Safety Factors (5)
14-year-old established domain
Self-branded content matching the domain
No forms, no credential or payment fields
No threat-intelligence, YARA, or IDS matches
Standard third-party analytics and error-monitoring services
Domain age information unavailable

Details

Page Title

Лучшие рестораны, кафе и бары, бесплатное бронирование столиков и банкетов - ТоМесто

Scan Type

public

Domain Name Analysis

The domain name 'tomesto.ru' uses the Russian country-code top-level domain (.ru). The second-level label 'tomesto' is 7 characters long split between 3 vowels and four consonants. Breaking it apart gives two words: tomes, to. Median word length comes out to 3.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://tomesto.ru

Page Load Overview

1.78s
Total Load Time
354 KB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru
Text Length:1,672 chars
Detector Agreement:100%

Website Classification

Primary Category

news media journalism86% confidence
Type: dynamic
Method: ml+structural

All Detected Categories

news media journalism
86%
government public service
85%
finance banking
79%
healthcare medical
79%
travel tourism
78%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
9176.114.92.114Moscow, Moscow, Russia
AS50340JSC Selectel
635.190.88.7Google · CDNKansas City, Missouri, United States
AS396982Google LLC
687.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
677.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
274--

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1568257BF155051B713C3A2E4E9003A5D6C9B89BDEBC779B9D3F5846A33D2DA0CA0091E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:k/rr98Q6XOlK/qmFTumMZaHpNTqs9zch3Wp47ou95PLLZ:8rh8QyOlK/qRx8HpNViWC7ou95P5

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18761:wqoAGAAQCkAwBJIm0QiQhh6AAQkCQ1+A4QTXpqCzuEEBEBxQjMQx0RAACRtBSVRREhkHnUjAOohVgZAAoHCRYAAAbYYBYgmx

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:993d193919193900
Perceptual Hash:8add4cb870f632b2
Difference Hash:31f1312929292929
Wavelet Hash:ff3d3d3919191901
Color Hash:#bf9540

Scan History

Scan history not available

Unable to load historical scan data