Security Scan Report: lab-metr.ru

Site favicon
Submitted: Completed: publiccompleted
This website contacted 23 IPs in 3 countries across 12 domains to perform 95 HTTP transactions. The main domain is lab-metr.ru.

Submitted URL: https://lab-metr.ru

AI Security Verdict

Moderate Risk

Confidence: 62%

5
Risk Score

Russian DIY tools blog with legitimate editorial content and no forms, but page scripts POST to suspicious host newrotatormarch23.bid with eval() usage — possible injected ad/redirect code. Use with caution.

Risk Factors (3)
Cross-origin POST to suspicious external host newrotatormarch23.bid (likely injected ad/redirect script)
eval() dynamic code execution present in page scripts
4 cross-domain redirects in the navigation chain
Safety Factors (5)
Domain age 1046 days (well-established registration)
No credential, password, or payment forms
No Indicators of Compromise, JavaScript YARA malware, or IDS alerts
Legitimate-looking editorial content with privacy policy and terms pages
No brand impersonation; self-branded content
Domain age information unavailable

Details

Page Title

Инструментариум

Scan Type

public

Domain Name Analysis

Domain 'lab-metr.ru' uses the Russian country-code top-level domain (.ru). The core label 'lab-metr' covers 8 characters with 2 vowels and five consonants; bonus characters include one hyphen. It segments into 3 words: lab, met, r. Average segment length settles at 3 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://lab-metr.ru

Page Load Overview

18.42s
Total Load Time
5.7 MB
Total Size

Language Analysis

Primary Language

🇷🇺Russian
Code: ru
Confidence:80%
Script:Cyrillic
Direction:ltr

Detection Details

HTML Lang Attribute:ru-RU
Text Length:3,223 chars
Detector Agreement:100%

Website Classification

Primary Category

education learning93% confidence
Type: spa
Method: ml+structural

All Detected Categories

education learning
93%
documentation technical
87%
corporate
25%
news/blog
20%

Detected Features

Articles
OG: website
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
777.246.149.230Russia
AS29182JSC IOT
4142.251.14.95Google · CDNUnited States
AS15169Google LLC
4142.251.14.156Google · CDNUnited States
AS15169Google LLC
477.88.44.55Yandex · CLOUDMoscow, Moscow, Russia
AS13238YANDEX LLC
478.46.37.35Falkenstein, Saxony, Germany
AS24940Hetzner Online GmbH
4104.17.207.5Cloudflare · WAFUnited States
AS13335Cloudflare, Inc.
4192.178.183.94Google · CDNUnited States
AS15169Google LLC
487.250.251.119Yandex · CLOUDRussia
AS13238YANDEX LLC
487.250.250.119Yandex · CLOUDRussia
AS13238YANDEX LLC
437.9.64.225Yandex · CLOUDRussia
AS13238YANDEX LLC
9523--

Detected Technologies9

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1FD14F76400762876524F337D896D632C7361D007C5217EA8796C9D0CEFBDEEE4AE532A

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

1536:F2ZyplaOmJZajozCOIGZgshe6NcnvkGqDUAV8X4gTGBal7SSSSS21JWKeiO+Cec6:F2USJ8OIGZgRiigO5EFbIEgTK6

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:190613:sKkHCMCUKCWBACBDy4AFKgOcJCKXtCogAx0VSPBEfPASECTjIEHgShyBImQ6QnSRiAAgeEICS2VUDxAAKUPgAgFgpqMMCxQC

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Scan History

Scan history not available

Unable to load historical scan data