Security Scan Report: crobux.ru

Site favicon
Submitted: Sep 22, 2026, 11:34:57 PMCompleted: Sep 22, 2026, 11:37:08 PMpubliccompleted

AI Security Verdict

Low Risk

Confidence: 65%

2
Risk Score

Old, self-branded Russian fashion blog with genuine editorial content; no credential/payment forms, no IoC, no YARA, no impersonation. Only ad-heavy redirect churn and one cross-origin POST warrant mild caution.

Risk Factors
Unusually high redirect churn: 155 redirects, 128 cross-domain
One cross-origin POST to an external domain (ip.mehanoid.pro) alongside a large ad-network footprint
Heavy inline scripting (8 Function() constructor calls, encoding/decoding usage, 26 crypto API references) typical of ad-tech but noisier than baseline
Safety Factors
Domain registered 2022, well-established age category
Site displays its own brand only (self-branding), no different-brand impersonation
No credential harvesting, no payment collection, no password fields
No threat-intel IoC matches, no YARA malware, no verified malicious kit
IDS alert is a single informational MEDIUM (observed ZeroSSL certificate), not a phishing/malware signature
Domain age information unavailable

Details

Page Title

Кробукс - твой стиль

Scan Type

public

Domain Name Analysis

The domain name 'crobux.ru' uses the Russian country-code top-level domain (.ru). The registrable portion 'crobux' spans 6 characters containing two vowels alongside four consonants. Segmentation suggests 2 words: cro, bux. Median word length comes out to three characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://crobux.ru

Page Load Overview

90.09s
Total Load Time
4.3 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:6,614 chars
Detector Agreement:100%

Website Classification

Primary Category

adult content77% confidence
Type: spa
Method: ml+structural

All Detected Categories

adult content
77%
documentation technical
54%
corporate
35%
government public service
29%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
6589.169.42.183Russia
AS29182JSC IOT
231.129.109.116St Petersburg, St.-Petersburg, Russia
AS198610Beget LLC
287.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
2188.114.96.9Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
290.156.170.209Russia
AS198610Beget LLC
2155.212.203.195Moscow, Moscow, Russia
AS47764LLC VK
2151.236.71.248Germany
AS204720Global Cloud Network LLC
277.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
277.88.21.119Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
294.139.250.252Asbest, Sverdlovsk Oblast, Russia
AS210656Yandex.Cloud LLC
353145--

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1C582A572E09400667F5EC7EDC1D1B228E568A705CA06B76671F430B89D98AFB04FB71E

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

192:op+EbJB+o66Z+dOccy6IhrfaqLrqwRXdSZsTaAh51TNslQCfEGHRmy4kWU2:vEbJB+o4dNJ6Ih7a4r/ZdSZUaAhHkWU2

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:18537:BEkotNHSSCgqgPp0JagCR0gACIJrAYAgvphLAChZUhwkUQgYRwwAbCFanAAgSLlaAzYIOKAoBICAWHghBZtAVABh4ktQBTSc

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:d3fffb87c3c7c7c7
Perceptual Hash:b0cdc4343e38cdcd
Difference Hash:3306932e0b0e1e0c
Wavelet Hash:81ffcb8383878387
Color Hash:#4e783a

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data